Jira (PUP-8946) Return all eyaml encrypted values from hiera as Sensitive

[Gene Liverman (JIRA)]

Gene Liverman created an issue

Puppet / PUP-8946 Return all eyaml encrypted values from hiera as Sensitive Issue Type: Improvement Assignee: Unassigned Created: 2018/06/15 6:27 AM Priority: Normal Reporter: Gene Liverman It seems to me that it would be logical to assume that if a value is encrypted via eyaml in hiera that it is sensitive. Based on this, I think all such values should be returned wrapped in the Sensitive type. The result would be that if a String is looked up that a Sensitive[String] would be returned. The same kind of wrapping would hold true for Array, Hash, and Integer too. Add Comment

This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)

[Gene Liverman (JIRA)]

Gene Liverman updated an issue

Puppet / PUP-8946 Return all eyaml encrypted values from hiera as Sensitive

Change By: Gene Liverman Labels: customer0

Add Comment

[Henrik Lindberg (JIRA)]

Henrik Lindberg commented on PUP-8946

Re: Return all eyaml encrypted values from hiera as Sensitive This is a good idea, I think it can be implemented as a parameter to the eyaml_lookup_key function. That would make it backwards compatible, and users that want this can opt in and set an option in their hiera.yaml (by default for all eyaml, or for some paths individually).

Add Comment

[Henrik Lindberg (JIRA)]

Henrik Lindberg updated an issue

Puppet / PUP-8946

Return all eyaml encrypted values from hiera as Sensitive

Change By: Henrik Lindberg Sub-team: Language Team: Platform Core

Add Comment

[Henrik Lindberg (JIRA)]

Henrik Lindberg commented on PUP-8946

Re: Return all eyaml encrypted values from hiera as Sensitive This probably requires an orchestrated effort with changes to both the function and the eyaml gem.

Add Comment

[Nick Walker (JIRA)]

Nick Walker commented on PUP-8946

Re: Return all eyaml encrypted values from hiera as Sensitive

Henrik Lindberg this could be optional in puppet 5 and the new default behavior in 6 yes?

Add Comment

[Henrik Lindberg (JIRA)]

Henrik Lindberg commented on PUP-8946

Re: Return all eyaml encrypted values from hiera as Sensitive

It would break everyone's code if default is changed and they use data types for the class parameters as they have to be declared to accept Sensitive.

Add Comment

[Adam Gardner (JIRA)]

Adam Gardner commented on PUP-8946

Re: Return all eyaml encrypted values from hiera as Sensitive

I know this has been marked "Accepted" already, but please consider implementing PUP-8947 instead, it seems much friendlier, and provides a much easier transition for existing codebases.

Add Comment

[Reid Vandewiele (JIRA)]

Reid Vandewiele commented on PUP-8946

Re: Return all eyaml encrypted values from hiera as Sensitive

I suggest we close this ticket "Won't Do" in favor of PUP-8947.

Add Comment

[Josh Cooper (Jira)]

Josh Cooper updated an issue

Puppet / PUP-8946

Return all eyaml encrypted values from hiera as Sensitive

Change By: Josh Cooper Epic Link: PUP-11371

Add Comment

This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97)

[Josh Cooper (Jira)]

Josh Cooper updated an issue

Puppet / PUP-8946 Return all eyaml encrypted values from hiera as Sensitive

Change By: Josh Cooper Team: Froyo

Add Comment

[Josh Cooper (Jira)]

Josh Cooper updated an issue

Puppet / PUP-8946 Return all eyaml encrypted values from hiera as Sensitive

Change By: Josh Cooper Component/s: Hiera & Lookup

Add Comment

This message was sent by Atlassian Jira (v8.20.2#820002-sha1:829506d)