Fix exposing password for debug mode

DEFERME Bert · DEFERME Bert · commit d975ad9097eb · 2022-12-12T11:40:38.000+01:00
diff --git a/manifests/database/postgresql.pp b/manifests/database/postgresql.pp
@@ -69,9 +69,9 @@
   }
 
   exec { 'update_pgpass':
-    command => "echo ${database_host}:${database_port}:${database_name}:${database_user}:${database_password_unsensitive} >> /root/.pgpass",
+    command => Sensitive("echo ${database_host}:${database_port}:${database_name}:${database_user}:${database_password_unsensitive} >> /root/.pgpass"),
     path    => "/bin:/usr/bin:/usr/local/sbin:/usr/local/bin:${database_path}",
-    unless  => "grep \"${database_host}:${database_port}:${database_name}:${database_user}:${database_password_unsensitive}\" /root/.pgpass",
+    unless  => Sensitive("grep \"${database_host}:${database_port}:${database_name}:${database_user}:${database_password_unsensitive}\" /root/.pgpass"),
     require => File['/root/.pgpass'],
   }
 

Original file line number	Diff line number	Diff line change
`@@ -69,9 +69,9 @@`
`69`	`69`	`}`
`70`	`70`
`71`	`71`	`exec { 'update_pgpass':`
`72`		`- command => "echo ${database_host}:${database_port}:${database_name}:${database_user}:${database_password_unsensitive} >> /root/.pgpass",`
	`72`	`+ command => Sensitive("echo ${database_host}:${database_port}:${database_name}:${database_user}:${database_password_unsensitive} >> /root/.pgpass"),`
`73`	`73`	`path => "/bin:/usr/bin:/usr/local/sbin:/usr/local/bin:${database_path}",`
`74`		`- unless => "grep \"${database_host}:${database_port}:${database_name}:${database_user}:${database_password_unsensitive}\" /root/.pgpass",`
	`74`	`+ unless => Sensitive("grep \"${database_host}:${database_port}:${database_name}:${database_user}:${database_password_unsensitive}\" /root/.pgpass"),`
`75`	`75`	`require => File['/root/.pgpass'],`
`76`	`76`	`}`
`77`	`77`