From 21364a42022339d9dee3f2dd598fba016bf34cc8 Mon Sep 17 00:00:00 2001
From: juvdiaz <juvenal.diaz@oracle.com>
Date: Mon, 29 Jun 2026 13:24:23 -0600
Subject: [PATCH] Require explicit edge HAProxy password

---
 bootstrap/edge/variables.tf | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/bootstrap/edge/variables.tf b/bootstrap/edge/variables.tf
index 78ea42e..6d1c76a 100644
--- a/bootstrap/edge/variables.tf
+++ b/bootstrap/edge/variables.tf
@@ -86,6 +86,12 @@ variable "haproxy_stats_user" {
 }
 
 variable "haproxy_stats_password" {
-  type    = string
-  default = "adminpassword"
+  type      = string
+  sensitive = true
+  default   = ""
+
+  validation {
+    condition     = length(var.haproxy_stats_password) >= 12 && var.haproxy_stats_password != "adminpassword"
+    error_message = "haproxy_stats_password must be set explicitly to a non-default value with at least 12 characters."
+  }
 }