isn't better not to return a Sensitive data in vault_lookup.rb (just plain
text), but wrap the Deferred function with Sensitive?
Like this:
$secret_lookup = Sensitive(Deferred('vault_lookup::lookup', ["secret/
client.example.com", 'https://puppet.example.com:8228']))
notify {mysql_root:
message => Deferred('get', [$secret_lookup.unwrap, 'mysql_root_password'])
}
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/78981ba9-05a1-461a-8e41-24a512f5b5db%40googlegroups.com.