Merge pull request #5 from jmccann/sensitive

Sensitive Flag to suppress command trace output

DOCS.md

@@ -7,6 +7,7 @@ Use the Terraform plugin to apply the infrastructure configuration contained wit
 * `vars` - a map of variables to pass to the Terraform `plan` and `apply` commands. Each value is passed as a `-var
  <key>=<value>` option.
 * `ca_cert` - ca cert to add to your environment to allow terraform to use internal/private resources
+* `sensitive` (default: `false`) - Whether or not to suppress terraform commands to stdout.
 
 The following is a sample Terraform configuration in your .drone.yml file:
 
@@ -36,7 +37,7 @@ CA Certificate.  You can inject your CA Certificate into the plugin by using
 ```yaml
 deploy:
   terraform:
-    dry_run: false
+    plan: false
     remote:
       backend: swift
       config:
@@ -50,3 +51,25 @@ deploy:
       asdfsadf
       -----END CERTIFICATE-----
 ```
+
+## Suppress Sensitive Output
+You may be passing sensitive vars to your terraform commands.  If you do not want
+the terraform commands to display in your drone logs then set `sensitive` to `true`.
+The output from the commands themselves will still display, it just won't show
+want command is actually being ran.
+
+```yaml
+deploy:
+  terraform:
+    plan: false
+    sensitive: true
+    remote:
+      backend: S3
+      config:
+        bucket: my-terraform-config-bucket
+        key: tf-states/my-project
+        region: us-east-1
+      vars:
+        app_name: my-project
+        app_version: 1.0.0
+```

main.go

@@ -15,6 +15,7 @@ type terraform struct {
 	Plan      bool              `json:"plan"`
 	Vars      map[string]string `json:"vars"`
 	Cacert    string            `json:"ca_cert"`
+	Sensitive bool              `json:"sensitive"`
 }
 
 type remote struct {
@@ -49,7 +50,9 @@ func main() {
 		c.Dir = workspace.Path
 		c.Stdout = os.Stdout
 		c.Stderr = os.Stderr
+		if !vargs.Sensitive {
 			trace(c)
+		}
 
 		err := c.Run()
 		if err != nil {