Re: [Puppet Users] Looking up the value defined in the hiera.yaml

2020-11-23 Thread 'Dirk Heinrichs' via Puppet Users
Am Montag, den 23.11.2020, 15:23 +0900 schrieb Go Iwai:

> It looks more natural if I could rewrite this line above like below:
> 
> eyaml decrypt --file=encrypted-file
> --pkcs7-public-key=%{pkcs7_public_key}
> --pkcs7-private-key=%{pkcs7_private_key}

I don't think you need to specify these options at all if everything is
configured correctly. I have the following hiera.yaml in my Puppet
environments:

 - ...
 - common.yaml


With this in place I can simply type "eyaml edit common.yaml" or "eyaml
encrypt -s 'something'", w/o specifying the keys every time.

HTH...
Dirk-- 
Dirk HeinrichsSenior Systems Engineer, Delivery PipelineOpenText ™
Discovery | RecommindPhone: +49 2226 15966 18Email: 
dheinric@opentext.comWebsite: www.recommind.deRecommind GmbH, Von-
Liebig-Straße 1, 53359 RheinbachVertretungsberechtigte
Geschäftsführer Gordon Davies, Madhu Ranganathan, Christian Waida,
Registergericht Amtsgericht Bonn, Registernummer HRB 10646This e-mail
may contain confidential and/or privileged information. If you are not
the intended recipient (or have received this e-mail in error) please
notify the sender immediately and destroy this e-mail. Any unauthorized
copying, disclosure or distribution of the material in this e-mail is
strictly forbiddenDiese E-Mail enthält vertrauliche und/oder rechtlich
geschützte Informationen. Wenn Sie nicht der richtige Adressat sind
oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte
sofort den Absender und vernichten Sie diese Mail. Das unerlaubte
Kopieren sowie die unbefugte Weitergabe dieser Mail sind nicht
gestattet.
---

version: 5

defaults:

  datadir: hiera

  lookup_key: eyaml_lookup_key

hierarchy:

  - name: Main

options:

  pkcs7_private_key: '/etc/puppetlabs/code/keys/private_key.pkcs7.pem'

  pkcs7_public_key: '/etc/puppetlabs/code/keys/public_key.pkcs7.pem'

paths:

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/e9c50caa8ec375fd11a7b439109617a09893304a.camel%40opentext.com.


signature.asc
Description: This is a digitally signed message part


[Puppet Users] Looking up the value defined in the hiera.yaml

2020-11-23 Thread Go Iwai
Hello,

I am writing this to ask you if/how I can lookup values defined in the
hiera.yaml.

My hiera.yaml looks like:

hierarchy:
  - name: "sensitive data"
lookup_key: eyaml_lookup_key
path: sensitive.eyaml
options:
  pkcs7_public_key: /etc/puppetlabs/puppet/keys/public_key.pkcs7.pem
  pkcs7_private_key: /etc/puppetlabs/puppet/keys/private_key.pkcs7.pem

I would like to lookup the location for the keys from the yaml file.
Because I need to decrypt some files like:

eyaml decrypt --file=encrypted-file
--pkcs7-public-key=/etc/puppetlabs/puppet/keys/public_key.pkcs7.pem
--pkcs7-private-key=/etc/puppetlabs/puppet/keys/private_key.pkcs7.pem

It looks more natural if I could rewrite this line above like below:

eyaml decrypt --file=encrypted-file
--pkcs7-public-key=%{pkcs7_public_key}
--pkcs7-private-key=%{pkcs7_private_key}

Please let me know if there is any way to realise this. I would
appreciate so much if anybody could give me advice or suggestion.

Kind regards,
Go

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAAyfkv_UWyZ51uBZfVRt0AaKXdc3_wu1_ES5AcHgd%3Dfnvq7pwA%40mail.gmail.com.