OpenSSL Encryption backend for Hiera


A backend for Hiera that provides per-value encryption of sensitive data within yaml files to be used by Puppet.

Only the values are encrypted, allowing files to be swiftly reviewed without decryption.

The value of each key is encrypted individually, which means that "git diff" is meaningful.

Includes a command line tool for encrypting, decrypting, editing and rotating keys. This makes it almost as easy as using clear text files.

Basic asymmetric encryption (PKCS#7) is used by default. This does not require any native libraries to be compiled, and it allows users without the private key to encrypt values that the puppet master can decrypt

hiera-eyaml includes a pluggable encryption framework (e.g. GPG encryption (hiera-eyaml-gpg) can be used if you have the need for multiple keys and easier key rotation)

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V



Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install hiera-eyaml