Accept Datatype Sensitive for Secrets

Author: Cocker Koch

lib/puppet/type/java_ks.rb

@@ -104,7 +104,13 @@ def insync?(is)
       unlocking. Must be six or more characters in length. Cannot be used
       together with :password_file, but you must pass at least one of these parameters.'
 
+    munge do |value|
+      value = value.unwrap if value.respond_to?(:unwrap)
+      super(value)
+    end
+
     validate do |value|
+      value = value.unwrap if value.respond_to?(:unwrap)
       raise Puppet::Error, "password is #{value.length} characters long; must be 6 characters or greater in length" if value.length < 6
     end
   end
@@ -127,7 +133,13 @@ def insync?(is)
   newparam(:destkeypass) do
     desc 'The password used to protect the key in keystore.'
 
+    munge do |value|
+      value = value.unwrap if value.respond_to?(:unwrap)
+      super(value)
+    end
+
     validate do |value|
+      value = value.unwrap if value.respond_to?(:unwrap)
       raise Puppet::Error, "destkeypass is #{value.length} characters long; must be of length 6 or greater" if value.length < 6
     end
   end
@@ -160,6 +172,11 @@ def value=(*values)
   end
 
   newparam(:source_password) do
+    munge do |value|
+      value = value.unwrap if value.respond_to?(:unwrap)
+      super(value)
+    end
+
     desc 'The source keystore password'
   end