From a86ec529709fc8f66feba843de5f4fc37dd76359 Mon Sep 17 00:00:00 2001
From: Joshua Hoblitt <josh@hoblitt.com>
Date: Mon, 1 Apr 2024 14:28:58 -0700
Subject: [PATCH] (profile::ccs::postfix) convert auth param to Sensitive

---
 site/profile/manifests/ccs/postfix.pp | 4 ++--
 spec/fixtures/hieradata/common.yaml   | 2 ++
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/site/profile/manifests/ccs/postfix.pp b/site/profile/manifests/ccs/postfix.pp
index ba92c4e111..8b8fd2a736 100644
--- a/site/profile/manifests/ccs/postfix.pp
+++ b/site/profile/manifests/ccs/postfix.pp
@@ -8,14 +8,14 @@
 #   List of postfix packages to install
 #
 class profile::ccs::postfix (
-  String        $auth,
+  Sensitive[String[1]] $auth,
   Array[String] $packages,
 ) {
   include postfix
 
   postfix::hash { '/etc/postfix/sasl_passwd':
     ensure  => 'present',
-    content => $auth,
+    content => $auth.unwrap,
   }
 
   ensure_packages($packages)
diff --git a/spec/fixtures/hieradata/common.yaml b/spec/fixtures/hieradata/common.yaml
index 4cce15b088..32ea6dd0ed 100644
--- a/spec/fixtures/hieradata/common.yaml
+++ b/spec/fixtures/hieradata/common.yaml
@@ -22,6 +22,8 @@ lookup_options:
     convert_to: "Sensitive"
   '^restic::(id|key|password)$':
     convert_to: "Sensitive"
+  '^profile::ccs::postfix::auth$':
+    convert_to: "Sensitive"
 ccs_database::database: "comcamdbprod"
 ccs_database::password: "foo"
 foreman_proxy::plugin::dns::route53::aws_access_key: "foo"