Jira (PUP-10950) unless should support sensitive data for any type

[Sheena Tharakanparampil (Jira)]

Title: Message Title

Sheena Tharakanparampil created an issue   Puppet / PUP-10950 unless should support sensitive data for any type Issue Type: Bug Assignee: Unassigned Created: 2021/03/04 10:15 AM Priority: Normal Reporter: Sheena Tharakanparampil Puppet Version:6.22.0 (was able to reproduce the problem on puppetagent6-nightly and puppetagent7-nightly) OS Name/Version:Ubuntu 18.04 (*on all OSes)* Sensitive masking is not implemented in core puppet at the points where the module needs it: Using 'Sensitive' in 'unless' throws the following error Steps to reproduce the problem Install the latest version of postgresql module (v6.10.2 and above) which we uses sensitive for security fixes. puppet module install puppetlabs-postgresql --version 7.0.0 Apply the following manifest   test.pp class { 'postgresql::server': } postgresql::server::role { testuser: password_hash => postgresql::postgresql_password('testuser', 'testpw'), }   puppet apply test.pp Notice: Compiled catalog for oval-secrecy.delivery.puppetlabs.net in environment production in 0.37 seconds Warning: /Postgresql_psql[ALTER ROLE testuser ENCRYPTED PASSWORD ****]: Unable to mark 'unless' as sensitive: unless is a parameter and not a property, and cannot be automatically redacted. Notice: /Stage[main]/Main/Postgresql::Server::Role[testuser]/Postgresql_psql[CREATE ROLE testuser ENCRYPTED PASSWORD ****]/command: changed [redacted] to [redacted] Notice: Applied catalog in 1.01 seconds root@oval-secrecy:~#   Desired Behavior: unless should support sensitive data Actual Behavior: Throws the below error on unless  Unable to mark 'unless' as sensitive: unless is a parameter and not a property, and cannot be automatically redacted. Found similar tickets for exec type https://tickets.puppetlabs.com/browse/PUP-8399 Please let us know if you need more information.   Add Comment   This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.389976.1614881718000.157632.1614881760060%40Atlassian.JIRA.