MMS api key stored plain text

[shortdudey123]

The MMS api key in the node['mongodb3']['config']['mms']['mmsApiKey'] attribute is stored plain text currently and any chef node has access to this. It poses a potential security risk.

Possible solutions:

• Encrypted data bag (Solved in https://github.com/sunggun-yu/chef-mongodb3/pull/7)
• Chef Vault

Other thoughts on non-plain text options?

[sunggun-yu]

@shortdudey123 the test wrapper cookbook I've added for you use the encrypted data bag. https://github.com/sunggun-yu/chef-mongodb3/blob/develop/test/data_bags/mongodb/mms-agent.json

I closed out the #7 since wrapper can set the attributes from encrypted data bag. also I believe you can use chef vault in your wrapper.

Thanks

[shortdudey123]

since wrapper can set the attributes from encrypted data bag

Please refer to the first line of my issue :) The MMS api key in the node['mongodb3']['config']['mms']['mmsApiKey'] attribute is stored plain text

[sunggun-yu]

oh, I got you now. sorry for miss understanding. btw, it sounds having LWRP is the better option for this.

[shortdudey123]

Converting the this template to an LWRP? that sounds like it would work