DevOps-Bash-tools/terraform/terraform_cloud_varset_vars.sh

#!/usr/bin/env bash
#  vim:ts=4:sts=4:sw=4:et
#  args:
#  args: :organization
#
#  Author: Hari Sekhon
#  Date: 2021-12-21 13:30:39 +0000 (Tue, 21 Dec 2021)
#
#  https://github.com/HariSekhon/DevOps-Bash-tools
#
#  License: see accompanying Hari Sekhon LICENSE file
#
#  If you're using my code you're welcome to connect with me on LinkedIn and optionally send me feedback to help steer this or other code I publish
#
#  https://www.linkedin.com/in/HariSekhon
#

# https://www.terraform.io/cloud-docs/api-docs/variable-sets

set -euo pipefail
[ -n "${DEBUG:-}" ] && set -x
srcdir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

# shellcheck disable=SC1090,SC1091
. "$srcdir/lib/utils.sh"

# shellcheck disable=SC2034,SC2154
usage_description="
Lists Terraform Cloud variables in all variable sets for a given organiztion

See terraform_cloud_organizations.sh to get a list of organization IDs
See terraform_cloud_varsets.sh to get a list of variable sets and their IDs

\$TERRAFORM_ORGANIZATION and \$TERRAFORM_VARSET_ID can be used instead of arguments

Output:

<varset_id>    <varset_name>    <id>    <type>    <sensitive>    <name>    <value>
"

# used by usage() in lib/utils.sh
# shellcheck disable=SC2034
usage_args="[<organization> <varset_id>]"

help_usage "$@"

#min_args 1 "$@"

org="${1:-${TERRAFORM_ORGANIZATION:-}}"
varset_id="${2:-${TERRAFORM_VARSET_ID:-}}"

if [ -z "$org" ]; then
    usage "no terraform organization given and TERRAFORM_ORGANIZATION not set"
fi

# TODO: add pagination support
if [ -n "$varset_id" ]; then
    if ! [[ "$varset_id" =~ ^varset-[[:alnum:]]+$ ]]; then
        usage "invalid varset id given: $varset_id - should be in format varset-[[:alnum:]]+"
    fi
    variable_sets="$("$srcdir/terraform_cloud_api.sh" "/varsets/$varset_id" | jq -r '.data | [.id, .attributes.name] | @tsv')"
else
    variable_sets="$("$srcdir/terraform_cloud_api.sh" "/organizations/$org/varsets" | jq -r '.data[] | [.id, .attributes.name] | @tsv')"
fi

while read -r varset_id varset_name; do
    # TODO: add pagination support
    "$srcdir/terraform_cloud_api.sh" "/varsets/$varset_id/relationships/vars"  |
    jq -r ".data[] | [\"$varset_id\", \"$varset_name\", .id, .attributes.category, .attributes.sensitive, .attributes.key, .attributes.value] | @tsv" |
    column -t
done <<< "$variable_sets"