Skip to content
Connect an agent

Organisations

Show the HCP Terraform run task's HMAC key again

For an owner or admin setting up HCP Terraform.

POST/orgs/{org}/hcp-terraform/run-task/reveal

TL;DR

QuestionAnswer
What does it do?Show the HCP Terraform run task's HMAC key again.
What does it take?org in the path.
What does it return?Status 200 with a body of type RunTaskWithKey.
What can go wrong?401 not signed in; 403 the plan has no run task (plan.run_task_not_included), a member may not (orgs.forbidden), or the request came from an origin that may not make changes; 404 no such organisation, the caller is not a member of it, or the run task is off (run_task.not_found); 429 too many requests; 503 the server has no KEY_ENCRYPTION_SECRET, or the HMAC key can no longer be opened (run_task.unavailable); organisations are not set up on this server. Every failure uses the one error envelope.

What it does

For an owner or admin setting up HCP Terraform. Audited, never with the key. The owner and an admin, on Pro and Enterprise.

Path parameters

FieldTypeRequiredDescription
orgstringyesThe organisation's id or its slug.

Responses

StatusMeaningBody
200The run task, with its HMAC key.RunTaskWithKey
401Not signed in.ErrorResponse
403The plan has no run task (plan.run_task_not_included), a member may not (orgs.forbidden), or the request came from an origin that may not make changes.ErrorResponse
404No such organisation, the caller is not a member of it, or the run task is off (run_task.not_found).ErrorResponse
429Too many requests.ErrorResponse
503The server has no KEY_ENCRYPTION_SECRET, or the HMAC key can no longer be opened (run_task.unavailable); organisations are not set up on this server.ErrorResponse

Response body

A 200 answer has the type RunTaskWithKey.

FieldTypeRequiredDescription
activebooleanyesWhether the owner's plan includes the run task (Pro and Enterprise). While it does not, each run is reported as passed with a sentence, and nothing is drawn.
plan"free" | "pro" | "enterprise"yes
enabledbooleanyesWhether the run task is on.
endpointstring | nullyesThe endpoint URL to give HCP Terraform, by the organisation id. Null on a server with no API_URL.
keyLast4string | nullyesThe HMAC key's last four characters, or null while the run task is off.
failOnErrorbooleanyesTrue when a run Plotwork cannot draw or keep is reported as failed. False (the default) reports it as passed, with a sentence.
enabledAtinteger | nullyesWhen it was turned on, in milliseconds since the epoch.
enabledByobject | nullyesWho turned it on, or null when that account is gone.
enabledBy.idstringyes
enabledBy.emailstringyes
lastRunAtinteger | nullyesWhen HCP Terraform last called it for a run, in milliseconds since the epoch, or null for never.
lastStatus"passed" | "failed" | nullyesThe status sent back to the last run.
hmacKeystringyesThe HMAC key to give HCP Terraform. Shown by this answer only; keep it out of logs and files. 64 hex characters.

See also

DocWhy
API referenceEvery endpoint, and the error envelope
SchemasEvery request and response type
Tool referenceThe operations as callable tools