Eyaml and Puppet

Question

I have keys, certificate and intermediate chain certificate that I need to put into Hiera and using eyaml to encrypt before putting into Hiera on puppet. My question is do I have to encrypt each of the certificates and the key and copy the contents into Hiera. I would like an example if possible. These are wildcard certificate that I purchased from Godaddy. Thanks.

Answer 1

To create an encrypted copy of a private key:

$ eyaml encrypt -l my_hiera_key_name -f path_to_secret.key 

This command will produce two differently-formatted outputs suitable for copying straight into your Hiera file. Just choose the one you like the best, and copy/paste it into Hiera.