4 ms·
Awesome project, thanks for sharing. Looks like it takes a similar approach as the hiera eyaml project (it also encrypts on a per-key basis using gpg) which I'
by dcosson 12y ago
Awesome project, thanks for sharing.
Looks like it takes a similar approach as the hiera eyaml project (it also encrypts on a per-key basis using gpg) which I've found to be really nice to work with in the past (as opposed to other tools that use symmetric encryption or encrypt the entire blob of all secret keys together). Glad to see a tool that does this with etcd and consul, gives the same benefits without a centralized puppetmaster.
Any plans for clients in other languages? Or if you're not planning to build would you accept PR's for them?
- kelseyhightower 12y agoYeah, I'm open working with anyone on other client libs. Ideally we can track them in an official doc in the repo. To help others get started I'll document the data we store in etcd/consul in more detail. Ideally clients only need to store values with the following encoding base64(gpg(gzip(data))) and do the reverse when retrieving data. As long as the public/private keys are available, everything should work.