Configuring Jerakia for encryption

In the jerakia.yaml configuration file, we configure the encryption option with a provider of Vault and the specific configuration that our provider requires: 

encryption:   provider: vault   vault_addr: http://127.0.0.1:8200   vault_use_ssl: false   vault_role_id: bfce3860-0805-43dc-ab6d-fe789559fe32   vault_secret_id: 8a2fa99c-7811-5e65-a74a-8ab2ba9b6389   vault_keyname: jerakia

We should now be able to encrypt and decrypt using Jerakia:

$ jerakia secret encrypt mySecret vault:v1: d3HftM8HAJDwWeSfLkBcdpAdTFy8fBu3mj4Kf3mHADSLuevwCbjZ$ jerakia secret decrypt vault:v1:d3HftM8HAJDwWeSfLkBcdpAdTFy8fBu3mj4Kf3mHADSLuevwCbjZ mySecret

Get Mastering Puppet 5 now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.