fix: Fix sensitive parameters being displayed in the new workspace form (#1796)

BrunoQuaresma · web-flow · commit 7b393526c56a · 2022-05-26T13:42:25.000-05:00
diff --git a/site/src/xServices/createWorkspace/createWorkspaceXService.ts b/site/src/xServices/createWorkspace/createWorkspaceXService.ts
@@ -156,7 +156,9 @@ export const createWorkspaceMachine = createMachine(
         selectedTemplate: (_, event) => event.template,
       }),
       assignTemplateSchema: assign({
-        templateSchema: (_, event) => event.data,
+        // Only show parameters that are allowed to be overridden.
+        // CLI code: https://github.com/coder/coder/blob/main/cli/create.go#L152-L155
+        templateSchema: (_, event) => event.data.filter((param) => param.allow_override_source),
       }),
       assignCreateWorkspaceRequest: assign({
         createWorkspaceRequest: (_, event) => event.request,
