Jira (PUP-11846) Munging failed for value # in class content: no implicit conversion of Puppet::Pops::Types::PSensitiveType::Sensitive into String

[Nate McCurdy (Jira)]

Title: Message Title

Nate McCurdy updated an issue   Puppet / PUP-11846 Munging failed for value #<Sensitive [value redacted]> in class content: no implicit conversion of Puppet::Pops::Types::PSensitiveType::Sensitive into String Change By: Nate McCurdy *Puppet Version:* 7.24.0 *Puppet Server Version:* n/a *OS Name/Version:* n/a h2. The Problem Using a {{Deferred}} {{inline_epp()}} to render Sensitive content into a {{file}} resource while using {{--no-preprocess_deferred}} throws the following error message: {noformat} Error: Failed to apply catalog: Munging failed for value #<Sensitive [value redacted]> in class content: no implicit conversion of Puppet::Pops::Types::PSensitiveType::Sensitive into String {noformat} h2. Reproduction Given this Puppet code: {code} $cert         = Sensitive('hello') $intermediate = Sensitive('world') $chain        = Deferred('inline_epp', ["<%= \$cert %>\n<%= \$intermediate %>\n", {       'cert'         => $cert,       'intermediate' => $intermediate, }]) file { '/tmp/test_chain.pem':   ensure  => 'file',   content => $chain, } {code} With Puppet 7.24.0 and the {{--no-preprocess_deferred}} option, apply the manifest above: {noformat} $ puppet apply test.pp --no-preprocess_deferred Notice: Compiled catalog for nate in environment production in 0.01 seconds Error: Failed to apply catalog: Munging failed for value #<Sensitive [value redacted]> in class content: no implicit conversion of Puppet::Pops::Types::PSensitiveType::Sensitive into String {noformat} Running puppet apply without {{--no-preprocess_deferred}} succeeds: {noformat} $ puppet apply test.pp Notice: Compiled catalog for nate in environment production in 0.01 seconds Notice: /Stage[main]/Main/File[/tmp/test_chain.pem]/ensure: changed [redacted] to [redacted] Notice: Applied catalog in 0.01 seconds {noformat} h2. More Info I also found that I can fix the problem by not using {{inline_epp()}}. If I change the {{$chain}} variable to be built with {{join()}}, it works: {code} # This isn't ideal because the file needs a trailing newline, which join() can't do. $chain = Sensitive(Deferred('join', [[$cert.unwrap, $intermediate.unwrap], "\n"])) {code} Here's a stack trace from using {{--trace}}: {noformat} Error: Failed to apply catalog: Munging failed for value #<Sensitive [value redacted]> in class content: no implicit conversion of Puppet::Pops::Types::PSensitiveType::Sensitive into String /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/checksums.rb:57:in `digest' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/checksums.rb:57:in `hexdigest' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/checksums.rb:57:in `sha256' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/type/file/checksum.rb:27:in `sum' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/type/file/content.rb:67:in `block (2 levels) in <module:Puppet>' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/parameter.rb:443:in `munge' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/property.rb:551:in `block in should=' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/property.rb:551:in `collect' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/property.rb:551:in `should=' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/type/file/content.rb:131:in `should=' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/property.rb:609:in `value=' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/transaction.rb:480:in `block in resolve_resource' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/type.rb:731:in `block in eachparameter' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/type.rb:731:in `each' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/type.rb:731:in `eachparameter' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/transaction.rb:473:in `resolve_resource' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/transaction.rb:279:in `eval_resource' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/transaction.rb:191:in `call' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/transaction.rb:191:in `block (2 levels) in evaluate' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:567:in `block in thinmark' /opt/puppetlabs/puppet/lib/ruby/2.7.0/benchmark.rb:308:in `realtime' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:566:in `thinmark' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/transaction.rb:191:in `block in evaluate' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/graph/relationship_graph.rb:122:in `traverse' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/transaction.rb:178:in `evaluate' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/resource/catalog.rb:238:in `block (2 levels) in apply' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:567:in `block in thinmark' /opt/puppetlabs/puppet/lib/ruby/2.7.0/benchmark.rb:308:in `realtime' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:566:in `thinmark' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/resource/catalog.rb:237:in `block in apply' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/log.rb:165:in `with_destination' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/transaction/report.rb:151:in `as_logging_destination' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/resource/catalog.rb:236:in `apply' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/configurer.rb:286:in `block (2 levels) in apply_catalog' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:567:in `block in thinmark' /opt/puppetlabs/puppet/lib/ruby/2.7.0/benchmark.rb:308:in `realtime' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:566:in `thinmark' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/configurer.rb:285:in `block in apply_catalog' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:245:in `block in benchmark' /opt/puppetlabs/puppet/lib/ruby/2.7.0/benchmark.rb:308:in `realtime' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:244:in `benchmark' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/configurer.rb:284:in `apply_catalog' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/configurer.rb:500:in `run_internal' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/configurer.rb:339:in `run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:83:in `block (6 levels) in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/context.rb:62:in `override' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet.rb:289:in `override' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:82:in `block (5 levels) in run' /opt/puppetlabs/puppet/lib/ruby/2.7.0/timeout.rb:95:in `block in timeout' /opt/puppetlabs/puppet/lib/ruby/2.7.0/timeout.rb:105:in `timeout' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:81:in `block (4 levels) in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent/locker.rb:21:in `lock' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:71:in `block (3 levels) in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:162:in `with_client' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:67:in `block (2 levels) in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:127:in `run_in_fork' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:66:in `block in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:172:in `controlled_run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:47:in `run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application/agent.rb:433:in `onetime' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application/agent.rb:393:in `block in run_command' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/context.rb:62:in `override' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet.rb:289:in `override' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application/agent.rb:390:in `run_command' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:421:in `block in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:756:in `exit_on_fail' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:421:in `run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:143:in `run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:77:in `execute' /opt/puppetlabs/puppet/bin/puppet:5:in `<main>' {noformat} Add Comment   This message was sent by Atlassian Jira (v8.20.11#820011-sha1:0629dd8) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.485142.1683044961000.10310.1683059460031%40Atlassian.JIRA.