Encrypting Data with Foreman

Support
1

Hi

I've seen that tools such as hiera-gpg can handle encrypted data, I've also
seen that it can have an impact on catalog compile time. Does foreman have
an equivalent or alternative way of doing this? It would also be nice if it
performed well too.

Thanks
Charlie

2

> Hi
>
> I've seen that tools such as hiera-gpg can handle encrypted data, I've
> also seen that it can have an impact on catalog compile time. Does foreman
> have an equivalent or alternative way of doing this? It would also be nice
> if it performed well too.
>

in 1.3, we've added the ability to encrypt data, at first with Compute
Resource passwords, it only makes sense to continue on that path and
provide encryption to parameters as well.

I don't assume it would provide a massive performance penalty, as it does
not need to shell out or anything like that and done purely in memory.

Hope to see it as part of 1.4,

Ohad

··· On Fri, Oct 18, 2013 at 1:51 AM, Charlie Derwent < shelltoesuperstar@gmail.com> wrote:

Thanks
Charlie

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/groups/opt_out.

3

>
>
>
>
>> Hi
>>
>> I've seen that tools such as hiera-gpg can handle encrypted data, I've
>> also seen that it can have an impact on catalog compile time. Does foreman
>> have an equivalent or alternative way of doing this? It would also be nice
>> if it performed well too.
>>
>
> in 1.3, we've added the ability to encrypt data, at first with Compute
> Resource passwords, it only makes sense to continue on that path and
> provide encryption to parameters as well.
>
> I don't assume it would provide a massive performance penalty, as it does
> not need to shell out or anything like that and done purely in memory.
>
> Hope to see it as part of 1.4,
>
> Ask and you shall receive! Thanks very much Ohad will look forward to 1.4,
do you want me to open a ticket? Also just out of interest can the
encrypted compute resource passwords survive a backup and restore?

Regards
Charlie

··· On Sun, Oct 20, 2013 at 7:37 AM, Ohad Levy wrote: > On Fri, Oct 18, 2013 at 1:51 AM, Charlie Derwent < > shelltoesuperstar@gmail.com> wrote:

Ohad

Thanks
Charlie

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/groups/opt_out.

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/groups/opt_out.

4

>
>>
>>
>>
>>
>>> Hi
>>>
>>> I've seen that tools such as hiera-gpg can handle encrypted data, I've
>>> also seen that it can have an impact on catalog compile time. Does foreman
>>> have an equivalent or alternative way of doing this? It would also be nice
>>> if it performed well too.
>>>
>>
>> in 1.3, we've added the ability to encrypt data, at first with Compute
>> Resource passwords, it only makes sense to continue on that path and
>> provide encryption to parameters as well.
>>
>> I don't assume it would provide a massive performance penalty, as it does
>> not need to shell out or anything like that and done purely in memory.
>>
>> Hope to see it as part of 1.4,
>>
>> Ask and you shall receive! Thanks very much Ohad will look forward to
> 1.4, do you want me to open a ticket? Also just out of interest can the
> encrypted compute resource passwords survive a backup and restore?
>
> 1. Please open a ticket
2. In order for it to work, a key secret needs to exists on the filesystem
(or as env variable), assuming that you don't lose this key, you can safely
restore…

Ohad

Regards

··· On Sun, Oct 20, 2013 at 2:49 PM, Charlie Derwent < shelltoesuperstar@gmail.com> wrote: > On Sun, Oct 20, 2013 at 7:37 AM, Ohad Levy wrote: >> On Fri, Oct 18, 2013 at 1:51 AM, Charlie Derwent < >> shelltoesuperstar@gmail.com> wrote: > Charlie > > >> Ohad >> >>> >>> Thanks >>> Charlie >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Foreman users" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to foreman-users+unsubscribe@googlegroups.com. >>> To post to this group, send email to foreman-users@googlegroups.com. >>> Visit this group at http://groups.google.com/group/foreman-users. >>> For more options, visit https://groups.google.com/groups/opt_out. >>> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Foreman users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to foreman-users+unsubscribe@googlegroups.com. >> To post to this group, send email to foreman-users@googlegroups.com. >> Visit this group at http://groups.google.com/group/foreman-users. >> For more options, visit https://groups.google.com/groups/opt_out. >> > > -- > You received this message because you are subscribed to the Google Groups > "Foreman users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to foreman-users+unsubscribe@googlegroups.com. > To post to this group, send email to foreman-users@googlegroups.com. > Visit this group at http://groups.google.com/group/foreman-users. > For more options, visit https://groups.google.com/groups/opt_out. >
5

>
>
>
>
>>
>>>
>>>
>>>
>>>
>>>> Hi
>>>>
>>>> I've seen that tools such as hiera-gpg can handle encrypted data, I've
>>>> also seen that it can have an impact on catalog compile time. Does foreman
>>>> have an equivalent or alternative way of doing this? It would also be nice
>>>> if it performed well too.
>>>>
>>>
>>> in 1.3, we've added the ability to encrypt data, at first with Compute
>>> Resource passwords, it only makes sense to continue on that path and
>>> provide encryption to parameters as well.
>>>
>>> I don't assume it would provide a massive performance penalty, as it
>>> does not need to shell out or anything like that and done purely in memory.
>>>
>>> Hope to see it as part of 1.4,
>>>
>>> Ask and you shall receive! Thanks very much Ohad will look forward to
>> 1.4, do you want me to open a ticket? Also just out of interest can the
>> encrypted compute resource passwords survive a backup and restore?
>>
>> 1. Please open a ticket
> 2. In order for it to work, a key secret needs to exists on the filesystem
> (or as env variable), assuming that you don't lose this key, you can safely
> restore…
>
> Done. Feature #3378: Support for Encrypted Parameters - Foreman

Thanks,
Charlie.

··· On Sun, Oct 20, 2013 at 1:12 PM, Ohad Levy wrote: > On Sun, Oct 20, 2013 at 2:49 PM, Charlie Derwent < > shelltoesuperstar@gmail.com> wrote: >> On Sun, Oct 20, 2013 at 7:37 AM, Ohad Levy wrote: >>> On Fri, Oct 18, 2013 at 1:51 AM, Charlie Derwent < >>> shelltoesuperstar@gmail.com> wrote:

Ohad

Regards

Charlie

Ohad

Thanks
Charlie

–
You received this message because you are subscribed to the Google
Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/groups/opt_out.

–
You received this message because you are subscribed to the Google
Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/groups/opt_out.

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/groups/opt_out.

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/groups/opt_out.