voxpupuli/hiera-eyaml
View on GitHub ↗ ★ 535 Ruby
A backend for Hiera that provides per-value asymmetric encryption of sensitive data
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2014-09-04 · latest 2017-02-15
20082026
-
For puppet users: https://github.com/TomPoulton/hiera-eyaml Advantage of this approach is it encrypts the values individually instead of per file. This way the secrets files are git/review friendly.
comment by aequitas · 2017-02-15 · in GitHub commit search: “remove password” -
…using for your deployments, for example if you were using Puppet you might use something like https://github.com/TomPoulton/hiera-eyaml
comment by aaronbasssett · 2015-08-17 · in WordPress base configuration files on GitHub -
We used something similar for Puppet: https://github.com/TomPoulton/hiera-eyaml Really neat thing was that you could inline encrypt just the secretes making the rest of the Puppet module viewable and comprehensible.
comment by dmourati · 2014-09-04 · in Blackbox: Safely store secrets in Git