Cloud-init has the ability to compliment Terraform in configuring the Virtual Machine it just created. My problem is that cloud-init as uploaded through
user-data means that the script especially if multi-part is available on the OpenStack metadata server.
This means any user on that virtual machine can get that user-data by simply running
Is there anyway to pass secrets in a cloud-init file?
This is a follow up to "Is there a way to install a private key for a user with cloud-init?". There I ask a question which could conceivably be answered with a provisioner that doesn't use cloud-init at all. This question is more broad.