The configuration system that has to exist

• sops

  150 15,114 9.0 Go

  Simple and flexible tool for managing secrets

  

Git + SOPS here.

• hiera-eyaml

  1 526 6.6 Ruby

  A backend for Hiera that provides per-value asymmetric encryption of sensitive data

  

Another way is to use the Hiera eyaml backend: https://github.com/voxpupuli/hiera-eyaml. With eyaml, you swap out the plaintext secrets in your Hiera for encrypted strings that are decrypted during catalog compilation.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• chamber

  12 2,399 7.5 Go

  CLI for managing secrets

  

Not sure if this would help, but if you're able to use AWS the SSM Parameter Store offers secrets management with version control and flexible ACLs. We use chamber to simplify reading/writing secrets, but again it's specific to AWS.

• petems-hiera_vault

  1 44 0.0 Ruby

  A hiera backend for access to secrets being stored in HashiCorp Vault

There’s also https://github.com/petems/petems-hiera_vault which will work with 4.10 but you will have pain installing any plugins with puppet being so old. (We’re on 4.10 too)

• git2consul

  2 763 0.0 JavaScript

  Mirrors the contents of a git repository into Consul KVs.

git2consul (https://github.com/breser/git2consul) is an interesting idea...

• hiera-eyaml-vault

  1 4 0.0 Ruby

  A hiera-eyaml encryption plugin for Vault's transit engine

Check out https://github.com/crayfishx/hiera-eyaml-vault which is a vault backend for hiera-eyaml. I'm not 100% sure but it could work with Puppet 4.10.

• gonsul

  1 96 0.0 Go

  A stand-alone alternative to git2consul

  

Yeah, I had considered something like this. There are many abandoned git2consul projects and forks... https://github.com/miniclip/gonsul looks like a good one, but a hashicorp official tool would be nice.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project