Telemetry Link stores access token in Terraform state file

[grossda-stackit]

Problem description

Telemetry Link requires an access token for the corresponding router. The token must be passed to the api on creation and update as string. Currently, it is stored in terraform state as plain text, which is not necessary and an additional security risk.

Proposed solution

Do not store the token. Provide two possibilities to update the Link resource:

• sending a new token explicitely
• without sending the token (then, the old token is kept)

Also, make the token itself an ephemeral, since it should be stored in the backend only.

[Manuelvaas]

Hi @grossda-stackit,
thank you for reporting this issue. We will take a look at it.