From 2aa2d0d71bd887dd87ed23e51b1eb2166c995a5e Mon Sep 17 00:00:00 2001
From: shirba <shirba@checkpoint.com>
Date: Tue, 12 May 2026 09:03:16 +0000
Subject: [PATCH] fix(CGNSPC-1866): add sensitive flag to Smart-1 Cloud token
 and password hash variables

---
 modules/high-availability/variables.tf | 2 ++
 modules/nva/variables.tf               | 1 +
 modules/single-gateway/variables.tf    | 1 +
 3 files changed, 4 insertions(+)

diff --git a/modules/high-availability/variables.tf b/modules/high-availability/variables.tf
index 9181b43..65cc21e 100644
--- a/modules/high-availability/variables.tf
+++ b/modules/high-availability/variables.tf
@@ -223,12 +223,14 @@ variable "smart_1_cloud_token_a" {
   description = "Smart-1 Cloud Token, for configuring member A."
   type        = string
   default     = ""
+  sensitive   = true
 }
 
 variable "smart_1_cloud_token_b" {
   description = "Smart-1 Cloud Token, for configuring member B."
   type        = string
   default     = ""
+  sensitive   = true
 
   validation {
     condition     = var.smart_1_cloud_token_b != "" && var.smart_1_cloud_token_a != "" ? true : var.smart_1_cloud_token_b == "" && var.smart_1_cloud_token_a == ""
diff --git a/modules/nva/variables.tf b/modules/nva/variables.tf
index 6cdeaea..6948f42 100644
--- a/modules/nva/variables.tf
+++ b/modules/nva/variables.tf
@@ -212,6 +212,7 @@ variable "maintenance_mode_password_hash" {
   description = "(Optional) Maintenance mode password hash, relevant only for R81.20 and higher versions."
   type        = string
   default     = ""
+  sensitive   = true
 }
 
 variable "bgp_asn" {
diff --git a/modules/single-gateway/variables.tf b/modules/single-gateway/variables.tf
index f850cf9..8e18502 100644
--- a/modules/single-gateway/variables.tf
+++ b/modules/single-gateway/variables.tf
@@ -207,6 +207,7 @@ variable "smart_1_cloud_token" {
   description = "Smart-1 Cloud Token."
   type        = string
   default     = ""
+  sensitive   = true
 }
 
 //********************** Management Variables **************************//