search

lyraproj / hiera

Hiera in golang - Elegant, powerful hierarchical key-value lookups
Apache License 2.0
69 stars 19 forks source link

Sensitive data encryption or Eyaml support? #72

Open Jinkxed opened 4 years ago

Jinkxed commented 4 years ago

Was looking at possibly using this instead of the gem counterpart. Love the direction so far, but think I'm blocked as we use eyaml as a way of encrypting secrets.

Do you have a mechanism that accomplishes this or is there plans to support such a plugin?

flashvoid commented 4 years ago

Hi @sc-chad

We have an in-house implementation of hiera-yeaml plugin that works with this server, my original plan was to opensource it, but we had to make architecture decisions which may or may not be optimal for the community.

So, what i'm saying is that I would love to start an interest group to talk through use-cases and maybe then we can work together to shape the plugin.

Jinkxed commented 4 years ago

@flashvoid Would absolutely love to have this conversation. I have an interesting workflow using hiera with https://github.com/cststack/k8comp that leverages the eyaml plugin.

Would love to see a set of golang plugins with this workflow or other use cases surrounding it.

thallgren commented 4 years ago

@flashvoid @sc-chad @hbuckle feel free to join our #cloudnative channel on Slack puppetcommunity.slack.com. It's intended for conversations such as this.

flashvoid commented 4 years ago

don't have a @puppet.com or @puppetlabs.com email, how can i get an invite?

thallgren commented 4 years ago

puppetcommunity.slack.com is open to everyone. You shouldn't need an invite.

Jinkxed commented 4 years ago

Tried a few different ways and different emails - wasn't able to login.

flashvoid commented 4 years ago

"Don't have an @puppetlabs.com or @puppet.com email address? Contact your Workspace Administrator for an invitation."

thallgren commented 4 years ago

Can you please send your email addresses to me at thomas.hallgren@puppet.com and I'll see if I can invite you.

thallgren commented 4 years ago

Turns out I'm supposed to be sending anyone interested in joining our community slack to https://slack.puppet.com where you can get your invite yourself.

Jinkxed commented 4 years ago

That worked - thanks!

ahpook commented 4 years ago

I know this conversation moved to slack but I don't recall the outcome - @sc-chad did you get a path forward?

Jinkxed commented 4 years ago

I didn't see the conversation in slack. I had to abandon it until I can revisit it.

I'd still love to see a go version of the eyaml plugin and I'd really really love to see a go version of https://github.com/cststack/k8comp which is a helm plugin that utilizes hiera/hiera-eyaml.

Very very much appreciate you following up.

Jinkxed commented 4 years ago

Did you guys ever release your internal eyaml plugin?

Jinkxed commented 2 years ago

Two years later and I'd still love to see an eyaml plugin :)