What's new?

• Improved masking of directory secrets: client_secret in turbot_google_directory and signature_private_key in turbot_saml_directory now always show as (sensitive value) in terraform plan and terraform apply output, including when they are set directly in configuration. For details, see GHSA-7jmh-m2pr-47hj. Thanks to kta1kri for reporting this.

Bug fixes

• resource/turbot_saml_directory: Request signing now works as documented. sign_requests takes true or false, and signature_algorithm takes SHA1, SHA256 or SHA512.
• resource/turbot_saml_directory: Directories that were also edited in the Guardrails console now refresh and import correctly, without showing unexpected changes in the plan.

Note

If a root module output refers to client_secret or signature_private_key, add sensitive = true to that output when you upgrade. Terraform requires this for outputs that hold sensitive values.