Problem:
My goal is to have unique root passwords for all servers i manage (2-300ish). They run a variety of different Linux distributions.
I would like to be able to write a class for puppet that would generate and change the root password, then store it in a secure environment.
Later, if needed, i would be able to retriever this password in a secure fashion.
I would also be able to specify timeframe for automatic password rotation.
Lastly, it would be nice to have a way of securely storing keys as well.
The thing is, i dont use foreman for deploying servers yet. We have multiple different hypervisors ranging from vmware to hyper-v to fusioncompute, and deployment with foreman is something i need to work on.
Ive looked at hashicorp vault and the foremanplugin, but i dont think it can do what i want. At least not out of the box.
I cant be the only one who needs a tool like this, so im hoping someone here have some experience with this kind of functionality and can point me in the right direction.
Expected outcome:
For something like this to exist i guess
Foreman and Proxy versions:
3.10
Foreman and Proxy plugin versions:
N/A
Distribution and version:
RHEL 8.9
Other relevant data:
N/A