From 249b126312641375450f0614e9b928948df2aa79 Mon Sep 17 00:00:00 2001
From: Mike Reeves <reevesmk@gmail.com>
Date: Thu, 14 May 2026 17:08:51 -0400
Subject: [PATCH] Quote telegraf role env vars to survive YAML-special chars in
 passwords

---
 salt/postgres/telegraf_users.sls | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/postgres/telegraf_users.sls b/salt/postgres/telegraf_users.sls
index b4226f1fd..28d9d6247 100644
--- a/salt/postgres/telegraf_users.sls
+++ b/salt/postgres/telegraf_users.sls
@@ -70,8 +70,8 @@ postgres_telegraf_role_{{ u }}:
   cmd.run:
     - name: /usr/sbin/so-telegraf-postgres user
     - env:
-      - ROLE_USER: {{ u }}
-      - ROLE_PASS: {{ p }}
+      - ROLE_USER: {{ u | tojson }}
+      - ROLE_PASS: {{ p | tojson }}
     - hide_output: True
     - require:
       - file: postgres_sbin