(profile::core::letsencrypt) convert aws_credentials param to Sensitive

lsst-it · Apr 1, 2024 · 1babd2e · 1babd2e
1 parent a254393
commit 1babd2e
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/site/profile/manifests/core/letsencrypt.pp b/site/profile/manifests/core/letsencrypt.pp
@@ -28,8 +28,8 @@
 # @param aws_credentials
 #   `.aws/credentials` format string for aws route53 credentials
 class profile::core::letsencrypt (
-  Optional[Hash[String, Hash]] $certonly = undef,
-  Optional[String] $aws_credentials      = undef,
+  Optional[Hash[String[1], Hash]] $certonly = undef,
+  Optional[Sensitive[String[1]]] $aws_credentials      = undef,
 ) {
   include letsencrypt
   include letsencrypt::plugin::dns_route53
@@ -68,7 +68,7 @@
         ensure  => file,
         mode    => '0600',
         backup  => false,
-        content => $aws_credentials,
+        content => $aws_credentials.unwrap,
         ;
     }
 

diff --git a/spec/classes/core/letsencrypt_spec.rb b/spec/classes/core/letsencrypt_spec.rb
@@ -68,7 +68,7 @@
       context 'with aws_credentials param' do
         let(:params) do
           {
-            aws_credentials: 'foo',
+            aws_credentials: sensitive('foo'),
           }
         end