Skip to content
This repository has been archived by the owner on May 20, 2020. It is now read-only.

Add encrypted data bag support #7

Conversation

shortdudey123
Copy link

Allows MMS api key to be loaded from an encrypted data bag

@sunggun-yu
Copy link
Owner

Hi @shortdudey123
Thank you for the PR!

I also assumed to use data bag for critical data. however, my decision was to let people to use wrapper for there own purpose. I'd like keep the cookbook as simple as possible.
how do you think?

@shortdudey123
Copy link
Author

You can't use a wrapper cookbook and still stay secure. If you load from an encrypted data bag or vault, how do you get the data into the template w/o using attributes?

@shortdudey123
Copy link
Author

@sunggun-yu any update on your side?

@shortdudey123
Copy link
Author

@sunggun-yu any updates?

@sunggun-yu
Copy link
Owner

@shortdudey123
Hi, I'm so sorry about delaying this PR. I'm trying to write some example for this issue.
please give me few more days.
and, not to create the dependency of data bag is one of my goal on this cookbook. please understand.

@shortdudey123
Copy link
Author

trying to write some example for this issue

Can you elaborate on what you mean?

not to create the dependency of data bag

This is not a dependency since it is optional as seen here

@shortdudey123
Copy link
Author

@sunggun-yu any updates on your end? Would love to have this merged / dealt with since its over 100 days old

@shortdudey123
Copy link
Author

@sunggun-yu any updates on your end?

sunggun-yu added a commit that referenced this pull request Jan 19, 2016
* to prove wrapper cookbook can be used : #7
@sunggun-yu
Copy link
Owner

@shortdudey123
I'm so sorry for late reply.

I added test wrapper cookbook. please check : https://github.com/sunggun-yu/chef-mongodb3/blob/develop/test/cookbooks/mongodb3-test/recipes/mms_automation_agent_with_data_bag.rb

this test cookbook set the attribute from encrypted data bag.

Thank you.

@sunggun-yu sunggun-yu closed this Jan 19, 2016
@shortdudey123
Copy link
Author

That does not solve the original problem
The api key is still stored clear text...

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants