Docs: Specify that sops will consume credentials as per binary and not from provider about terraform-provider-sops HOT 3 CLOSED

Hi @fardarter,
I'm not familiar with Azure Devops, so unsure exactly what is exposed to the runners there automatically. Perhaps they consider the ARM_* environments too sensitive to expose to arbitrary tasks without you being explicit about it?
But essentially, as long as the environment contains the necessary variables, however they got there, things should work. If the environment is not set, then there's not much we can do, I'm afraid.

Let me know if I'm misunderstanding the question!

from terraform-provider-sops.

Hi @fardarter, I'm not familiar with Azure Devops, so unsure exactly what is exposed to the runners there automatically. Perhaps they consider the ARM_* environments too sensitive to expose to arbitrary tasks without you being explicit about it? But essentially, as long as the environment contains the necessary variables, however they got there, things should work. If the environment is not set, then there's not much we can do, I'm afraid.

Let me know if I'm misunderstanding the question!

The variables are not automatically set in the environment, but they are the same values that are used for rest of the terraform script. Knowing little about the internals of providers, I assumed you'd be able to retrieve those values internally and pass them to sops? The SP running the plan has the correct RBAC permissions.

(Worth adding this to the docs either way?)

Thanks for the reply.

from terraform-provider-sops.

Closed in #93

from terraform-provider-sops.