hiera-eyaml
hiera-eyaml copied to clipboard
voxpupuli
A backend for Hiera that provides per-value asymmetric encryption of sensitive data
You can make a user config file like so ``` ~/.eyaml/config.yaml ``` You can additionally create environment variables to override this file hiera-eyaml should also support a system wide config...
pkcs7-subject cmdline object has been added globally rather than to the pkcs7 createkeys plugin
Noticed when getting exceptions in some places, they were not wrapped or formatted nicely making them hard to read. Also colorized output would help warn in red, info in white,...
Under mysterious conditions, hiera-eyaml replaces the .eyaml editing file with nothing (0 bytes). It may be related to a :wq on EDITOR=vi, needs to be investigated, its kind of unacceptable...
using eyaml in puppet like: ```puppet $method = lookup('secret::password_eyaml',String,undef,"INVALID") ``` is not fault tolerant. Everytime something goes wrong puppet aborts: - if private key is not found -> fatal error...
eyaml decrypt output: ``` foo: DEC(123)::GPG[ -----BEGIN OPENSSH PRIVATE KEY----- ... -----END OPENSSH PRIVATE KEY----- ]! ``` This isn't valid YAML. It would be better as: ``` foo: | DEC(123)::GPG[...
Please fast-forward merge and include the v3.5.0 tag from my repo; or otherwise generate a new gpg-signed tag.
Hi! Can you please release a new version, it's been 6+ months and the code has reasonable improvements. Likely v3.5.0 as semver to account for the minor new feature of...
It should be possible to call puppet functions directly from Hiera. e.g. ```yaml stdlib::manage::create_resources: file: '/etc/app/db.cfg': ensure: 'file' content: "%{epp('profile/app/db.cfg.epp')}" ``` Hiera should then return the epp parsed content. How...
As soon as PKCS#7 is a too generic term, I believe it's useful to pin actual algorithms used for encryption in README.
