eyaml
OpenSSL Encryption backend for Hiera
Install
- All systems
-
curl cmd.cat/eyaml.sh
- Debian
-
apt-get install hiera-eyaml - Ubuntu
-
apt-get install hiera-eyaml - Kali Linux
-
apt-get install hiera-eyaml - Windows (WSL2)
-
sudo apt-get updatesudo apt-get install hiera-eyaml - Raspbian
-
apt-get install hiera-eyaml - Dockerfile
- dockerfile.run/eyaml
hiera-eyaml
OpenSSL Encryption backend for Hiera
A backend for Hiera that provides per-value encryption of sensitive data within yaml files to be used by Puppet. Only the values are encrypted, allowing files to be swiftly reviewed without decryption. The value of each key is encrypted individually, which means that "git diff" is meaningful. Includes a command line tool for encrypting, decrypting, editing and rotating keys. This makes it almost as easy as using clear text files. Basic asymmetric encryption (PKCS#7) is used by default. This does not require any native libraries to be compiled, and it allows users without the private key to encrypt values that the puppet master can decrypt hiera-eyaml includes a pluggable encryption framework (e.g. GPG encryption (hiera-eyaml-gpg) can be used if you have the need for multiple keys and easier key rotation)