Jira (PUP-8969) Sensitive parameters are not redacted from reports / agent output when used in templates

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper commented on PUP-8969   Re: Sensitive parameters are not redacted from reports / agent output when used in templates If you wrap the template as Sensitive, then it works as expected for me: file {'/tmp/test1': ensure => present, content => Sensitive(template('sensitive/test1.erb')), }   file {'/tmp/test2': ensure => present, content => Sensitive(template('sensitive/test2.epp')), } Note redacting sensitive file content was fixed in PUP-6627: $ touch /tmp/test{1,2} $ bx puppet apply -e "include sensitive" --modulepath ~/work/modules --show_diff Notice: Compiled catalog for localhost in environment production in 0.03 seconds Notice: /Stage[main]/Sensitive/File[/tmp/test1]/content: [diff redacted] Notice: /Stage[main]/Sensitive/File[/tmp/test1]/content: changed [redacted] to [redacted] Notice: /Stage[main]/Sensitive/File[/tmp/test2]/content: [diff redacted] Notice: /Stage[main]/Sensitive/File[/tmp/test2]/content: changed [redacted] to [redacted] Notice: Applied catalog in 0.05 seconds $ cat /tmp/test{1,2}       This string should be redacted: 'this is sensitive'       This string should be redacted: 'this is sensitive' $ grep redacted ~/.puppetlabs/opt/puppet/cache/state/last_run_report.yaml message: "[diff redacted]" message: changed [redacted] to [redacted] message: "[diff redacted]" message: changed [redacted] to [redacted] previous_value: "[redacted]" desired_value: "[redacted]" message: changed [redacted] to [redacted] redacted: true previous_value: "[redacted]" desired_value: "[redacted]" message: changed [redacted] to [redacted] redacted: true $ grep 'this is sensitive' ~/.puppetlabs/opt/puppet/cache/state/last_run_report.yaml $ Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.