From 0df88d300e8bd653b00a8f1e8267a8de0191f83e Mon Sep 17 00:00:00 2001
From: Yuri Astrakhan <yuriastrakhan@gmail.com>
Date: Fri, 6 Jul 2018 22:48:21 -0400
Subject: [PATCH] fix random keepers

---
 website/docs/r/compute_ssl_certificate.html.markdown | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/website/docs/r/compute_ssl_certificate.html.markdown b/website/docs/r/compute_ssl_certificate.html.markdown
index 6846a346..0f3ee490 100644
--- a/website/docs/r/compute_ssl_certificate.html.markdown
+++ b/website/docs/r/compute_ssl_certificate.html.markdown
@@ -33,6 +33,12 @@ resource "google_compute_ssl_certificate" "default" {
 resource "random_id" "certificate" {
   byte_length = 4
   prefix      = "my-certificate-"
+
+  # For security, do not expose raw certificate values in the output
+  keepers {
+    private_key = "${base64sha256(file("path/to/private.key"))}"
+    certificate = "${base64sha256(file("path/to/certificate.crt"))}"
+  }
 }
 
 resource "google_compute_ssl_certificate" "default" {