Fixes #35944 - Hide content of autosign script.

The content may contain sensitive information about your signing
policies.  This script might not qualify as `sensitive` but it
probably is something to protect.

Author: jcpunk

manifests/server/config.pp

@@ -203,12 +203,13 @@
       $autosign_content = undef
     }
     file { $puppet::server::autosign:
-      ensure  => file,
-      owner   => $puppet::server::user,
-      group   => $puppet::server::group,
-      mode    => $puppet::server::autosign_mode,
-      content => $autosign_content,
-      source  => $puppet::server::autosign_source,
+      ensure    => file,
+      owner     => $puppet::server::user,
+      group     => $puppet::server::group,
+      mode      => $puppet::server::autosign_mode,
+      content   => $autosign_content,
+      source    => $puppet::server::autosign_source,
+      show_diff => false,
     }
   }
 

spec/classes/puppet_server_spec.rb

@@ -147,7 +147,7 @@
         it { should_not contain_puppet__config__agent('http_read_timeout') }
         it { should_not contain_file("#{confdir}/custom_trusted_oid_mapping.yaml") }
 
-        it { should contain_file("#{confdir}/autosign.conf") }
+        it { should contain_file("#{confdir}/autosign.conf").with_show_diff(false) }
         it { should_not contain_file("#{confdir}/autosign.conf").with_content(/# Managed by Puppet/) }
         it { should_not contain_file("#{confdir}/autosign.conf").with_content(/foo.bar/) }