From 6ad62d15338c5349550c19d46ec0d357d7e8b3fd Mon Sep 17 00:00:00 2001
From: Fabien COMBERNOUS <fabien.combernous@adullact.org>
Date: Wed, 23 Nov 2022 18:03:04 +0100
Subject: [PATCH] use Sensitive data type

---
 REFERENCE.md      | 4 ++--
 manifests/init.pp | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/REFERENCE.md b/REFERENCE.md
index 73a133d..c40a5eb 100644
--- a/REFERENCE.md
+++ b/REFERENCE.md
@@ -198,11 +198,11 @@ Default value: `'u_cfssl'`
 
 ##### <a name="dbpassword"></a>`dbpassword`
 
-Data type: `String[1]`
+Data type: `Variant[String[1], Sensitive[String]]`
 
 A password of the dbuser.
 
-Default value: `'changeme'`
+Default value: `('changeme')`
 
 ##### <a name="confdir"></a>`confdir`
 
diff --git a/manifests/init.pp b/manifests/init.pp
index 4970f61..09269d0 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -62,7 +62,7 @@ class cfssl (
   Stdlib::Absolutepath $logdir = '/var/log/cfssl',
   String[1] $dbname = 'db_cfssl',
   String[1] $dbuser = 'u_cfssl',
-  String[1] $dbpassword = 'changeme',
+  Variant[String[1], Sensitive[String]] $dbpassword = Sensitive.new('changeme'),
   Stdlib::Absolutepath $confdir = '/etc/cfssl',
   Stdlib::Absolutepath $binpath = '/usr/local/bin',
   Hash $rootca_manifest = { cn => 'EXEMPLE ROOT CA', subject => { 'C' => 'FR', 'L' => 'MONTPELLIER', 'O' => 'EXEMPLE ORG', } },
-- 
GitLab