1 files changed, 17 insertions, 0 deletions
diff --git a/3 Resources/Puppet/Sensitive type.md b/3 Resources/Puppet/Sensitive type.md
new file mode 100644
index 0000000..eed8e85
--- /dev/null
+++ b/3 Resources/Puppet/Sensitive type.md
@@ -0,0 +1,17 @@
+---
+tags:
+  - puppet
+references:
+  - https://www.puppet.com/docs/puppet/7/lang_data_sensitive.html
+---
+Cannot be used as a typedef in the class arguments because hieradata doesn't pass it as such but as a regular string.
+
+The `unwrap` method gives access to the original data.
+
+It doesn't encrypt anything - its only purpose is the hiding of data from logs and reports.
+
+To use Sensitive with a template we can wrap the `template` reference in it. Such as this:
+```
+'/etc/dnsdist/dnsdist.conf':
+    content => Sensitive(template('profile/application/dnsdist.conf.erb'));
+```