Re: [Puppet-dev] Passing Credentials in Powershell Scripts

2016-05-20 Thread Ian Oberst
Thanks Corey. I've been evaluating node_encrypt since it was talked about in the last Puppet User group that I went to. At this point I'm likely going to use a combination of node_encrypt for managing the catalog and the new Powershell provider (version 2.0) that now has in-memory execution of

Re: [Puppet-dev] Passing Credentials in Powershell Scripts

2016-05-20 Thread Trevor Vaughan
It will be shown unencrypted if you run in debug mode. Other than that, it should be fine. Trevor On Fri, May 20, 2016 at 3:27 PM, Corey Osman wrote: > I have been in this same situation before and used node_encrypt to do the > job. > > https://github.com/binford2k/binford2k-node_encrypt > > Yo

Re: [Puppet-dev] Passing Credentials in Powershell Scripts

2016-05-20 Thread Corey Osman
I have been in this same situation before and used node_encrypt to do the job. https://github.com/binford2k/binford2k-node_encrypt You can do the following. 1. encrypt hiera data with hiera-eyaml 2. encrypt parameter or other item during compilation using node_encrypt as the eyaml encrypted da

Re: [Puppet-dev] Passing Credentials in Powershell Scripts

2016-04-20 Thread Ian Oberst
Possibly. I'm assuming that you mean an encrypted one? There would be quite a bit of overhead there, as I'd have to generate the encrypted PSCredential for each individual node. That makes using an encrypted hiera backend to store the credentials much more gross since I can't store a single cre

Re: [Puppet-dev] Passing Credentials in Powershell Scripts

2016-04-20 Thread Rob Reynolds
Original conversation at https://github.com/puppetlabs/puppetlabs-powershell/issues/85 On Wed, Apr 20, 2016 at 10:49 AM, Rob Nelson wrote: > Can you pass a $PSCredential down, maybe as a File resource that the > script can rely on? The scripts may need modified per > https://technet.microsoft.co

Re: [Puppet-dev] Passing Credentials in Powershell Scripts

2016-04-20 Thread Rob Nelson
Can you pass a $PSCredential down, maybe as a File resource that the script can rely on? The scripts may need modified per https://technet.microsoft.com/en-us/magazine/ff714574.aspx Rob Nelson rnels...@gmail.com On Wed, Apr 20, 2016 at 10:52 AM, Ian Oberst wrote: > I've had a number of convers

[Puppet-dev] Passing Credentials in Powershell Scripts

2016-04-20 Thread Ian Oberst
I've had a number of conversations with various Puppet folks about this and it remains a bit of a sticky issue, namely *how do we safely handle powershell scripts where we need to pass credentials or other sensitive information to Powershell?* The scenario here is that we have a situation whe