chef_automate resource exposes secrets in delivery.rb

[JOSEPHBODNAR]

Cookbook version

2.3.0

Chef-client version

12

Platform Details

suse 12

Scenario:

The chef_automate resource displays secrets (e.g. data collector token) by exposing the /etc/delivery/delivery.rb file even though the sensitive property is set to true for the resource.

Steps to Reproduce:

Consume the chef_automate resource and set the sensitive property to true. Upon creation or a config change the changes to /etc/delivery/delivery.rb will be displayed.

The sensitive property should be passed (if set) to the 'automate' ingredient_config resource that is called inside the chef_automate resource. The ingredient_config resource is already coded to respect the sensitive resource.

Expected Result:

Do not display the /etc/delivery/delivery.rb file changes if the sensitive property is set to true for the chef_automate resource.

Actual Result:

The changes to /etc/delivery/delivery.rb are always displayed when changes are made to the chef_automate resource config.