Require explicit edge HAProxy password

2026-06-29 13:24:23 -06:00 · 2026-06-29 13:24:23 -06:00 · 21364a4202
parent a26f420d4a
commit 21364a4202
1 changed files with 8 additions and 2 deletions
--- a/bootstrap/edge/variables.tf
+++ b/bootstrap/edge/variables.tf
@ -87,5 +87,11 @@ variable "haproxy_stats_user" {

 variable "haproxy_stats_password" {
  type      = string
-  default = "adminpassword"
+  sensitive = true
+  default   = ""
+
+  validation {
+    condition     = length(var.haproxy_stats_password) >= 12 && var.haproxy_stats_password != "adminpassword"
+    error_message = "haproxy_stats_password must be set explicitly to a non-default value with at least 12 characters."
+  }
 }