Re: [Puppet Users] 3.6 directory environments, r10k, and hieradata

2014-06-22 Thread Pete Brown
I have my hiera data in a separate repository with the same branches as my environment repositories. I have r10k setup to check out my hiera repo and two environment trees. My first idea was to use a submodule but I am not sure r10k would handle that properly. You could use a separate module for

Re: [Puppet Users] 3.6 directory environments, r10k, and hieradata

2014-06-22 Thread Rich Burroughs
I wonder if you could use hiera-gpg or eyaml to deal with this. Keep the Hiera data in one repo, but have the sensitive data encrypted so the other groups can't read it but the Puppet master can. We use hiera-gpg where I work. With it you should be able to have the people working with the files

Re: [Puppet Users] 3.6 directory environments, r10k, and hieradata

2014-06-22 Thread Pete Brown
It would probably work with both of those. hiera-eyaml would make it easier because you don't need to encrypt the whole file and it still lets you use a separate data directory. Pete. On 23 June 2014 11:33, Rich Burroughs r...@richburroughs.com wrote: I wonder if you could use hiera-gpg or

[Puppet Users] 3.6 directory environments, r10k, and hieradata

2014-06-20 Thread Wolf Noble
Hi Guys, I have a few questions about 3.6 directory environments, which we're looking to adopt. Currently the most pressing surrounds the integration of r10k and hiera… I believe I want to store hieradata inside the r10k repos, so that each r10k repo (I'm planning on using these to segregate