isn't better not to return a Sensitive data in vault_lookup.rb (just plain text), but wrap the Deferred function with Sensitive? Like this: $secret_lookup = Sensitive(Deferred('vault_lookup::lookup', ["secret/ client.example.com", 'https://puppet.example.com:8228']))
notify {mysql_root: message => Deferred('get', [$secret_lookup.unwrap, 'mysql_root_password']) } -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/78981ba9-05a1-461a-8e41-24a512f5b5db%40googlegroups.com.