Accept Datatype Sensitive for $content

manifests/unit_file.pp

@@ -52,7 +52,7 @@
 define systemd::unit_file (
   Enum['present', 'absent', 'file']        $ensure    = 'present',
   Stdlib::Absolutepath                     $path      = '/etc/systemd/system',
-  Optional[String]                         $content   = undef,
+  Optional[Variant[String, Sensitive[String]]] $content = undef,
   Optional[String]                         $source    = undef,
   Optional[Stdlib::Absolutepath]           $target    = undef,
   String                                   $owner     = 'root',

spec/defines/unit_file_spec.rb

@@ -10,11 +10,27 @@
 
         it { is_expected.to compile.with_all_deps }
 
-        it do
-          is_expected.to create_file("/etc/systemd/system/#{title}").
-            with_ensure('file').
-            with_content(%r{#{params[:content]}}).
-            with_mode('0444')
+        context 'with non-sensitive Content' do
+          let(:params) { { content: 'non-sensitive Content' } }
+
+          it do
+            is_expected.to create_file("/etc/systemd/system/#{title}").
+              with_ensure('file').
+              with_content(params[:content]).
+              with_mode('0444')
+          end
+        end
+
+        context 'with sensitive Content' do
+          let(:params) { { content: sensitive('sensitive Content') } }
+
+          it do
+            resource = catalogue.resource("File[/etc/systemd/system/#{title}]")
+            expect(resource[:content]).to eq(params[:content].unwrap)
+
+            is_expected.to contain_file("/etc/systemd/system/#{title}").
+              with({ content: sensitive('sensitive Content') })
+          end
         end
 
         context 'with a bad unit type' do