Packer Sensitive Variables: Architecture Note for Secret Handling in Image Builds
Marking Packer variables as sensitive redacts values from logs and manifests but does not encrypt secrets or stop provisioners from leaking them. This architecture note covers requirements, minimal design, and failure modes.