On Thu, Dec 22, 2011 at 12:00 PM, Ryan Stewart <[email protected]> wrote:

> I'm new to Puppet, and I'm a software developer, not a sysadmin, so be
> gentle. I have puppet managing some files via templates, and one of
> the template variables that needs to be plugged in is a password of
> sorts that shouldn't be generally available. In particular, it can't
> be stored in the manifest, as that's stored in version control, and
> the password shouldn't be available there. Basically, the only place
> it's okay for this password to be stored is on the systems that will
> be using it.
>
> What would be the "Puppet way" of getting this string into the
> configuration?
>

http://www.craigdunn.org/2011/10/secret-variables-in-puppet-with-hiera-and-gpg/

Does that help?

I've done this in the past without hiera, where you have a function that
runs on the master to decrypt the content out of version control, but the
above makes it pretty simple.

-- 
Nigel Kersten
Product Manager, Puppet Labs

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to