Jira (PUP-6435) Replace sensitive data marker type with resource metadata after catalog compilation

[Eric Thompson (JIRA)]

Title: Message Title

Eric Thompson commented on PUP-6435   Re: Replace sensitive data marker type with resource metadata after catalog compilation validated against puppet-agent master SHA: on ubuntu1404 with: root@ydxd2cit0qzalcd:~# puppet apply -e 'notice Sensitive.new("abcd")' Notice: Scope(Class[main]): Sensitive [value redacted] Notice: Compiled catalog for ydxd2cit0qzalcd.delivery.puppetlabs.net in environment production in 0.07 seconds Notice: Applied catalog in 0.04 seconds root@ydxd2cit0qzalcd:~# puppet apply -e '$x = "abcd" notice Sensitive.new($x)' Notice: Scope(Class[main]): Sensitive [value redacted] Notice: Compiled catalog for ydxd2cit0qzalcd.delivery.puppetlabs.net in environment production in 0.07 seconds Notice: Applied catalog in 0.03 seconds root@ydxd2cit0qzalcd:~# puppet apply -e '$x = "abcd"; notice "${Sensitive.new($x)}"' Notice: Scope(Class[main]): Sensitive [value redacted] Notice: Compiled catalog for ydxd2cit0qzalcd.delivery.puppetlabs.net in environment production in 0.07 seconds Notice: Applied catalog in 0.18 seconds note below are changes for later (this is expected but will be fixed later): root@ydxd2cit0qzalcd:~# echo golly > /tmp/foo root@ydxd2cit0qzalcd:~# puppet apply --show_diff -e '$x = Sensitive.new("abcd"); file { "/tmp/foo": content => $x }' Notice: Compiled catalog for ydxd2cit0qzalcd.delivery.puppetlabs.net in environment production in 0.07 seconds Notice: /Stage[main]/Main/File[/tmp/foo]/content: --- /tmp/foo 2016-08-08 15:20:56.904586917 -0700 +++ /tmp/puppet-file20160808-2372-1os42ae 2016-08-08 15:20:59.848530463 -0700 @@ -1 +1 @@ -golly +abcd \ No newline at end of file   Notice: /Stage[main]/Main/File[/tmp/foo]/content: changed [redacted] to [redacted] Notice: Applied catalog in 0.11 seconds (should not show sensitive data in show-diff, logging, etc) each parameter in many resource types are going to be issues for now. properties should be redacted. root@ydxd2cit0qzalcd:~# grep -R abcd /opt/puppetlabs/puppet/cache/ /opt/puppetlabs/puppet/cache/state/last_run_report.yaml: message: abcd /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082309.yaml: message: abcd /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082221.yaml: message: abcd root@ydxd2cit0qzalcd:~# grep -R redacted /opt/puppetlabs/puppet/cache/ /opt/puppetlabs/puppet/cache/state/last_run_report.yaml: message: changed [redacted] to [redacted] /opt/puppetlabs/puppet/cache/state/last_run_report.yaml: previous_value: "[redacted]" /opt/puppetlabs/puppet/cache/state/last_run_report.yaml: desired_value: "[redacted]" /opt/puppetlabs/puppet/cache/state/last_run_report.yaml: message: changed [redacted] to [redacted] /opt/puppetlabs/puppet/cache/state/last_run_report.yaml: redacted: true /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082309.yaml: message: changed [redacted] to [redacted] /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082309.yaml: previous_value: "[redacted]" /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082309.yaml: desired_value: "[redacted]" /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082309.yaml: message: changed [redacted] to [redacted] /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082309.yaml: redacted: true /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082221.yaml: message: changed [redacted] to [redacted] /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082221.yaml: previous_value: "[redacted]" /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082221.yaml: desired_value: "[redacted]" /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082221.yaml: message: changed [redacted] to [redacted] /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082221.yaml: redacted: true /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082220.yaml: message: changed [redacted] to [redacted] /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082220.yaml: previous_value: "[redacted]" /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082220.yaml: desired_value: "[redacted]" /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082220.yaml: message: changed [redacted] to [redacted] /opt/puppetlabs/puppet/cache/reports/ydxd2cit0qzalcd.delivery.puppetlabs.net/201608082220.yaml: redacted: true Add Comment   This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.