use Sensitive data type

REFERENCE.md

@@ -198,11 +198,11 @@ Default value: `'u_cfssl'`
 
 ##### <a name="dbpassword"></a>`dbpassword`
 
-Data type: `String[1]`
+Data type: `Variant[String[1], Sensitive[String]]`
 
 A password of the dbuser.
 
-Default value: `'changeme'`
+Default value: `('changeme')`
 
 ##### <a name="confdir"></a>`confdir`
 

manifests/init.pp

@@ -62,7 +62,7 @@ class cfssl (
   Stdlib::Absolutepath $logdir = '/var/log/cfssl',
   String[1] $dbname = 'db_cfssl',
   String[1] $dbuser = 'u_cfssl',
-  String[1] $dbpassword = 'changeme',
+  Variant[String[1], Sensitive[String]] $dbpassword = Sensitive.new('changeme'),
   Stdlib::Absolutepath $confdir = '/etc/cfssl',
   Stdlib::Absolutepath $binpath = '/usr/local/bin',
   Hash $rootca_manifest = { cn => 'EXEMPLE ROOT CA', subject => { 'C' => 'FR', 'L' => 'MONTPELLIER', 'O' => 'EXEMPLE ORG', } },