Terraform v1.10 templatefile can't accept secrets

[benjyiw]

Terraform Version

Terraform v1.10.0
on linux_amd64

Terraform Configuration Files

locals {
  secrets = sensitive({ "key" = "value" })
}

output "template_output" {
  value = templatefile("test.yaml", local.secrets)
}

Debug Output

Copying the main error from the tf plan output for searchability:

Call to function "templatefile" failed: panic in function implementation: value is marked, so must be unmarked first

here's the gist containing full output: https://gist.github.com/benjyiw/a4ba664fefe0a06e9b4a823da46ba8e0

Expected Behavior

templatefile should accept accept secret values

Actual Behavior

terraform panics

Steps to Reproduce

1. terraform init
2. terraform plan

Additional Context

I provided the simplest example that I could muster for the bug report. In my case, I am pulling secrets from a cloud provider and merging them into a yaml file, which is where I saw the error for the first time this morning.

I can work around the problem by doing something like this:

sensitive(templatefile("test.yaml", nonsensitive(local.secrets)))

But I can't help but feel that this is a bug, so I opened the report.

Thanks!

References

No response

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.