Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
What is the best way to store and handle sensitive information with puppet and safely distribute it to your nodes?
The version I am using is 2.7.
One example would be database passwords. Plain text passwords are needed on your application servers.
How can one store these without leaving them lying around inside of the puppet scripts?
Using Hiera for external data lookups and encrypting that data via eyaml or GPG is a good start.
https://docs.puppet.com/hiera/
https://puppet.com/blog/encrypt-your-data-using-hiera-eyaml
http://leebriggs.co.uk/blog/2016/11/15/using-hiera-eyaml-gpg.html