search

chef-boneyard / knife-container

DEPRECATED: Container support for Chef's Knife Command
Apache License 2.0
57 stars 11 forks source link

Attribute Override File in etc/chef/secure #42

Open lynchc opened 9 years ago

lynchc commented 9 years ago

Situation: I need to pass along s3 creds to the container upon converge in order to pull down binaries for a micro-service. data-bags, and the other options are not desirable for lots of reasons. Env vars would stay with the image - no good.

What I'm doing now is passing in a json file and using a ruby block that will read this in. After converge is complete, the etc/chef/secure volume is unmounted and the image can go live with no credentials buried within. It would be nice, however, if you allowed a file to be dropped into the secure folder that will over-ride attributes automatically.

Thanks Tom

tduffield commented 9 years ago

I think this idea and will take it into consideration for the redesign.