Issue #7638 has been updated by Dean Wilson.

vi +240 lib/puppet/type/file.rb

<pre>
  newparam(:show_diff, :boolean => true, :parent => Puppet::Parameter::Boolean) 
do
    desc "Whether to display differences when the file changes, defaulting to
        true.  This parameter is useful for files that may contain passwords or
        other secret data, which might otherwise be included in Puppet reports 
or
        other insecure outputs.  If the global ``show_diff` configuration 
parameter
        is false, then no diffs will be shown even if this parameter is true."

    defaultto :true
  end
</pre>

This seems to be an option now so this ticket should be closed.

----------------------------------------
Feature #7638: Suppress file show_diff permanently
https://projects.puppetlabs.com/issues/7638#change-94124

* Author: Nan Liu
* Status: Accepted
* Priority: Normal
* Assignee: 
* Category: 
* Target version: 3.x
* Affected Puppet version: 
* Keywords: 
* Branch: 
----------------------------------------
Requesting a show_diff metaparameter for file resource (don't think it's used 
for any other resource). This is useful when confidential data such as password 
exists in config file and we do not want to leak this information via show_diff 
which are enabled by options such as puppet apply --noop. Similar to noop this 
is a permanent configuration setting for the resource.

    file {
      '/etc/my.cnf':
         content => template('mysql/my.cnf.erb'),
         show_diff => false,
    }


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to