{"action":"created","issue":{"url":"https://api.github.com/repos/hashicorp/terraform/issues/516","repository_url":"https://api.github.com/repos/hashicorp/terraform","labels_url":"https://api.github.com/repos/hashicorp/terraform/issues/516/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/terraform/issues/516/comments","events_url":"https://api.github.com/repos/hashicorp/terraform/issues/516/events","html_url":"https://github.com/hashicorp/terraform/issues/516","id":47036520,"number":516,"title":"Storing sensitive values in state files","user":{"login":"seanherron","id":297696,"avatar_url":"https://avatars.githubusercontent.com/u/297696?v=3","gravatar_id":"","url":"https://api.github.com/users/seanherron","html_url":"https://github.com/seanherron","followers_url":"https://api.github.com/users/seanherron/followers","following_url":"https://api.github.com/users/seanherron/following{/other_user}","gists_url":"https://api.github.com/users/seanherron/gists{/gist_id}","starred_url":"https://api.github.com/users/seanherron/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/seanherron/subscriptions","organizations_url":"https://api.github.com/users/seanherron/orgs","repos_url":"https://api.github.com/users/seanherron/repos","events_url":"https://api.github.com/users/seanherron/events{/privacy}","received_events_url":"https://api.github.com/users/seanherron/received_events","type":"User","site_admin":false},"labels":[{"id":85946961,"url":"https://api.github.com/repos/hashicorp/terraform/labels/question","name":"question","color":"cc317c","default":true},{"id":136652127,"url":"https://api.github.com/repos/hashicorp/terraform/labels/thinking","name":"thinking","color":"fad8c7","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":69,"created_at":"2014-10-28T15:02:12Z","updated_at":"2016-12-31T00:37:47Z","closed_at":null,"body":"#309 was the first change in Terraform that I could find that moved to store sensitive values in state files, in this case the `password` value for Amazon RDS. This was a bit of a surprise for me, as previously I've been sharing our state files publicly. I can't do that now, and feel pretty nervous about the idea of storing state files in version control at all (and definitely can't put them on github or anything).\n\nIf Terraform is going to store secrets, then some sort of field-level encryption should be built in as well. In the meantime, I'm going to change things around to use https://github.com/AGWA/git-crypt on sensitive files in my repos.\n"},"comment":{"url":"https://api.github.com/repos/hashicorp/terraform/issues/comments/269839415","html_url":"https://github.com/hashicorp/terraform/issues/516#issuecomment-269839415","issue_url":"https://api.github.com/repos/hashicorp/terraform/issues/516","id":269839415,"user":{"login":"mingfang","id":821695,"avatar_url":"https://avatars.githubusercontent.com/u/821695?v=3","gravatar_id":"","url":"https://api.github.com/users/mingfang","html_url":"https://github.com/mingfang","followers_url":"https://api.github.com/users/mingfang/followers","following_url":"https://api.github.com/users/mingfang/following{/other_user}","gists_url":"https://api.github.com/users/mingfang/gists{/gist_id}","starred_url":"https://api.github.com/users/mingfang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mingfang/subscriptions","organizations_url":"https://api.github.com/users/mingfang/orgs","repos_url":"https://api.github.com/users/mingfang/repos","events_url":"https://api.github.com/users/mingfang/events{/privacy}","received_events_url":"https://api.github.com/users/mingfang/received_events","type":"User","site_admin":false},"created_at":"2016-12-31T00:37:47Z","updated_at":"2016-12-31T00:37:47Z","body":"One option is to implement something like Ansible Vault.  ```terraform.tfstate``` will be encrypted and can be in git. A password is required each time the file is accessed."}}
{"actor":{"display_login":"mingfang"}}