hashicorp / hashicorp/nomad

Feature Request: Add support for `sensitive-variables`

Open
#7,109 1 comment 8 reactions 0 assignees View on GitHub
stage/needs-discussion type/enhancement
Dominant language
Go
Stars
17k
Forks
2.1k
Avg merge
1d 9h
Merged PRs (30d)
105

Description

Packer currently implements a `sensitive-variables` feature that would be very nice in Nomad. Specifically for the Job definition in the UI. It is nice to allow devs and management access to a read-only version of the UI using ACLs but they are not fine grained enough.

I would like to allow access but simple hide secrets that are passed into the job using `env` vars in 12-factor app style.

https://packer.io/docs/templates/user-variables.html

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the Job definition in the UI and review the linked Packer user-variables documentation for the intended sensitive-variables behavior. Determine how env vars passed into jobs should be represented for read-only users, with completion defined as hiding secrets while preserving permitted Job visibility.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
frontend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.