github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/openstack/compute/no_plaintext_password.tf.go (about)

     1  package compute
     2  
     3  var terraformNoPlaintextPasswordGoodExamples = []string{
     4  	`
     5   resource "openstack_compute_instance_v2" "good_example" {
     6     name            = "basic"
     7     image_id        = "ad091b52-742f-469e-8f3c-fd81cadf0743"
     8     flavor_id       = "3"
     9     key_pair        = "my_key_pair_name"
    10     security_groups = ["default"]
    11     user_data       = "#cloud-config\nhostname: instance_1.example.com\nfqdn: instance_1.example.com"
    12   
    13     network {
    14       name = "my_network"
    15     }
    16   }`,
    17  }
    18  
    19  var terraformNoPlaintextPasswordBadExamples = []string{
    20  	`
    21   resource "openstack_compute_instance_v2" "bad_example" {
    22     name            = "basic"
    23     image_id        = "ad091b52-742f-469e-8f3c-fd81cadf0743"
    24     flavor_id       = "3"
    25     admin_pass      = "N0tSoS3cretP4ssw0rd"
    26     security_groups = ["default"]
    27     user_data       = "#cloud-config\nhostname: instance_1.example.com\nfqdn: instance_1.example.com"
    28   
    29     network {
    30       name = "my_network"
    31     }
    32   }`,
    33  }
    34  
    35  var terraformNoPlaintextPasswordLinks = []string{
    36  	`https://registry.terraform.io/providers/terraform-provider-openstack/openstack/latest/docs/resources/compute_instance_v2#admin_pass`,
    37  }
    38  
    39  var terraformNoPlaintextPasswordRemediationMarkdown = ``