vaultlocker

pdk
Install and configure vaultlocker (https://pypi.org/project/vaultlocker/)

Chadwick Banning

walkamongus

460 downloads

460 latest version

3.1 quality score

Version information

  • 0.1.0 (latest)
released Mar 18th 2021
This version is compatible with:
  • Puppet Enterprise 2019.8.x, 2019.7.x, 2019.5.x, 2019.4.x, 2019.3.x, 2019.2.x, 2019.1.x, 2019.0.x, 2018.1.x, 2017.3.x, 2017.2.x, 2016.4.x
  • Puppet >= 4.10.0 < 7.0.0
  • CentOS
    ,
    OracleLinux
    ,
    RedHat
    ,
    Scientific

Start using this module

Documentation

walkamongus/vaultlocker — version 0.1.0 Mar 18th 2021

vaultlocker

Table of Contents

  1. Description
  2. Setup - The basics of getting started with vaultlocker
  3. Usage - Configuration options and additional functionality
  4. Limitations - OS compatibility, etc.
  5. Development - Guide for contributing to the module

Description

This module will install and configure vaultlocker and its requirements (such as the cryptsetup utility).

Setup

What vaultlocker affects

By default, this module will attempt to install and manage Python using the https://forge.puppet.com/modules/puppet/python module and also install the cryptsetup package.

Beginning with vaultlocker

include vaultlocker

will install the vaultlocker tool and a default configuration file. The default configuration will not work as site-specific Vault configuration is necessary for Vault storage of encryption keys.

Usage

An example of passing in a working vaultlocker configuration:

class { 'vaultlocker':
  config => {
    'url'       => https://my-vault-server:8200,
    'approle'   => 'approle-id',
    'secret_id' => 'secret-id',
    'backend'   => 'secret/vaultlocker',
  },
}

An example of passing in devices for encryption:

class { 'vaultlocker':
  config                  => {
    ...
  },
  encrypted_block_devices => [
    '/dev/sdd1',
    '/dev/sde',
  ],
}

Limitations

Developed and tested only on RHEL 8.

Development

All pull requests welcome. pdk test unit should pass for all contributions.