Slackbot
05/23/2023, 10:01 PMbinford2k
05/23/2023, 10:03 PM$vmagent_args
a Sensitive type?binford2k
05/23/2023, 10:03 PMnatemccurdy
05/23/2023, 10:04 PMbinford2k
05/23/2023, 10:04 PMnatemccurdy
05/23/2023, 10:04 PMcontent
when it's a Deferred and Sensitive value.natemccurdy
05/23/2023, 10:05 PMunwrap
then re-wrapping in Sensitive.
I think there's a bug in how the file type handles checksuming... but not sure. I haven't tracked it down.binford2k
05/23/2023, 10:05 PMDr Bunsen Honeydew
05/23/2023, 10:05 PMbinford2k
05/23/2023, 10:06 PMCorporate Gadfly
05/23/2023, 10:06 PM$vmagent_args
is Sensitive
.binford2k
05/23/2023, 10:07 PMcontent => $vmagent_args.unwrap.node_encrypt::secret
binford2k
05/23/2023, 10:09 PMCorporate Gadfly
05/23/2023, 10:09 PM$vmagent_args
which is Sensitive
. It was actually $sensitive_password
which is Sensitive
.
Usage was as below:
$vmagent_args = @("EOT")
# Set the command-line arguments to pass to the server.
ARGS="-promscrape.config=/opt/victoriametrics/conf/prometheus-scrape.yaml \
-remoteWrite.basicAuth.password=${sensitive_password.unwrap} \
-remoteWrite.tmpDataPath=/opt/victoriametrics/tmp-data
|EOT
So, I'm not too sure about using another .unwrap
call. But will try it and report back.Corporate Gadfly
05/23/2023, 10:11 PM--preprocess_deferred
for now.
Does that need to go in the agent puppet.conf
or on the puppetserver side, or both?Corporate Gadfly
05/23/2023, 10:13 PMbinford2k
05/23/2023, 10:14 PMCorporate Gadfly
05/23/2023, 10:29 PMpreprocess_deferred: true
in puppet.conf
to all the agents (nodes). Issue should fix itself within 2 successive runs.josh
05/23/2023, 10:50 PMSensitive
to the content
parameter of a file
resource?natemccurdy
05/23/2023, 11:21 PM# This works.
#$secret = new(Sensitive, "hello world\n")
# This works.
#$secret = Deferred('new', [String, "hello world\n"])
# This does not work.
$secret = Deferred('new', [Sensitive, "hello world\n"])
file { '/tmp/test.txt':
ensure => 'file',
content => $secret,
}
natemccurdy
05/23/2023, 11:21 PMfile
resource and its content
parameter.natemccurdy
05/23/2023, 11:22 PM--no-preprocess_deferred
.