Hiera-gpg

Installing

gem install hiera-gpg

or

mkdir /tmp/gems
gem install --no-ri --no-rdoc --install-dir /tmp/gems hiera-gpg
find /tmp/gems/cache -name '*.gem' | xargs -rn1 fpm -s gem -t deb
dpkg -i *.deb
# Feel free to put debs somewhere

Generate a Key

gpg --gen-key
# Or us an existing key

Setup the Puppetmasters's keyring

mkdir /etc/puppet/keyring/
gpg --homedir=/etc/puppet/keyring/ --import ~/.gnupg/pubring.gpg
...

Configure the hiera.yaml

...

Create an encrypted yaml file

...

References

• http://www.craigdunn.org/2011/10/secret-variables-in-puppet-with-hiera-and-gpg/
• https://github.com/crayfishx/hiera-gpg