Jira (PUP-10092) Support concatenating sensitive values

[Josh Cooper (JIRA)]

Title: Message Title

Josh Cooper created an issue   Puppet / PUP-10092 Support concatenating sensitive values Issue Type: Improvement Assignee: Unassigned Created: 2019/10/04 3:08 PM Priority: Normal Reporter: Josh Cooper The compiler evaluates interpolated sensitive values differently than non-interpolated ones, which is surprising: $secret = Sensitive('s3cret') notify { 'a': message => $secret } notify { 'b': message => "${secret}" } The first resource evaluates to: "parameters": { "message": "s3cret" }, "sensitive_parameters": [ "message" ] While the second evaluates to: "parameters": { "message": "Sensitive [value redacted]" } Note the second one is lossy, as we no longer know what the original value was. It would be preferable for the compiler to retain the sensitive data type during interpolation (when evaluating the concatenate _expression_). So for example "foo $secret" would produce a sensitive value whose unwrapped value was "foo s3cret". Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.328194.1570226898000.130548.1570226940521%40Atlassian.JIRA.