chefã§ç§˜å¯†æƒ…å ±ã‚’æš—å·åŒ–ã™ã‚‹encrypted data bagsを使ㆠ- tjinjin's blogAbout 今更感ã‚ã‚Šã¾ã™ãŒã€ã„ã‚ã„ã‚ãªSaaSを利用ã—始ã‚ã‚‹ã¨éµã®æ‰±ã„ã‚’ã©ã†ã™ã‚‹ã‹ã®å•é¡ŒãŒå‡ºã¦ãã¾ã™ã€‚生ã®ã¾ã¾ãƒªãƒã‚¸ãƒˆãƒªã«å«ã‚ã‚‹ã®ã¯è¨€èªžé“æ–ãªã®ã§ã€æœ€ä½Žé™ã®å¯¾ç–ã¨ã—ã¦ãƒ‡ãƒ¼ã‚¿ã‚’æš—å·åŒ–ã§ãã‚‹encrypted data bagsを試ã—ã¦ã¿ã¾ã™ã€‚ 使ã„æ–¹ 秘密éµã‚’用æ„ã™ã‚‹ æš—å·åŒ–ã«åˆ©ç”¨ã™ã‚‹éµã‚’作æˆã—ã¾ã™ã€‚下記コマンドã§éµã‚’作るã“ã¨ãŒã§ãã¾ã™ã€‚ $ openssl rand -base64 512 > .chef/data_bag_key 作æˆã—ãŸã‚‰ã€éµã‚’利用ã§ãるよã†ã«knife.rbã«éµã®ãƒ‘スを指定ã—ã¾ã™ã€‚ $ cat .chef/knife.rb ... data_bag_path "data_bags" encrypted_data_bag_secret ".chef/data_bag_key" ã“ã‚Œã§æº–å‚™ã¯å®Œæˆã§ã™ã€‚ æ–°è¦ä½œæˆ ãã‚Œã§ã¯æ©Ÿå¯†æƒ…å ±ã‚’data_bagsé…下ã«ä½œæˆã—ã¦ã„ãã¾ã™
{{#tags}}- {{label}}
{{/tags}}