Allow to pass the whole alloy config as Sensitive

Author: dabelenda

manifests/config.pp

@@ -2,7 +2,7 @@
 #
 # @api private
 class grafana_alloy::config (
-  Optional[String[1]] $config = undef,
+  Optional[Variant[String[1],Sensitive[String[1]]]] $config = undef,
 ) {
   assert_private()
 

manifests/init.pp

@@ -4,7 +4,7 @@
 #   The contents of the configuration file, if any
 # @param manage_package_repo Installs the package repositories
 class grafana_alloy (
-  Optional[String[1]] $config = undef,
+  Optional[Variant[String[1], Sensitive[String[1]]]] $config = undef,
   Boolean $manage_package_repo = true,
 ) {
   if $grafana_alloy::manage_package_repo {

spec/classes/grafana_alloy_spec.rb

@@ -26,6 +26,13 @@
         it { is_expected.to compile.with_all_deps }
         it { is_expected.to contain_file('/etc/alloy/config.alloy').with_content('my config without managing repo') }
       end
+
+      context 'with sensitive configuration' do
+        let(:params) { super().merge(config: sensitive('my config')) }
+
+        it { is_expected.to compile.with_all_deps }
+        it { is_expected.to contain_file('/etc/alloy/config.alloy').with_content(sensitive('my config')) }
+      end
     end
   end
 end