puppet-keepalived icon indicating copy to clipboard operation
puppet-keepalived copied to clipboard

Sensitive Data

Open cocker-cc opened this issue 1 year ago • 1 comments

To not reveal sensitive Data

  • either wrap the rendered Template in manifests/vrrp/instance.pp, like
    concat::fragment { "keepalived.conf_vrrp_instance_${_name}":
      target  => "${keepalived::config_dir}/keepalived.conf",
      content => Sensitive(template('keepalived/vrrp_instance.erb')),
      order   => "100-${_ordersafe}-000",
    }
    
    (concat handles sensitive Data since 7.4.0)
  • or use EPP instead of ERB, as EPP does handle sensitive Data natively

cocker-cc avatar May 10 '24 11:05 cocker-cc

Do you want to make a pull request that adds this to the module's documentation?

kenyon avatar May 10 '24 20:05 kenyon