Secret in cloud config blueprint yaml visible in plain text on deployed machine's vApp Options

Products

• VMware Aria Suite

Issue/Introduction

• A blueprint is configured with cloud config commands specifying Remote Access via usernamePassword Authenticaiton.
• The password value is set to a secret configured in Aria Automation 8.x.

cloudConfig: |
#cloud-config
remoteAccess:
authentication: usernamePassword
username: Administrator
password: ${secret.win-local-admin}

• On versions prior to Aria Automation 8.17 the secret value passed for the password is visible in plain text in the vSphere client under Virtual Machine > Configure > vApp Options
  
  
  

Environment

• Aria Automation 8.x

Cause

The secret value is passed as plain text to the ovf properties.

Resolution

The issue is resolved in the Aria Automation 8.17 release where the value is now masked.