Questions tagged [chef-vault]

Gem that allows you to encrypt a Chef Data Bag Item using the public keys of a list of chef nodes.

About

Chef Vault is an alternative tool for managing secrets with Chef. It was developed as an open source project originally by Nordstrom, but transferred to Chef in 2015. Unlike encrypted data bags, it does not require the use of one shared key by all users and pieces of infrastructure.

Links

20 questions
0
votes
1 answer

Chef Vault - deleting vault item produces 'data bag #{VAULT} is not a vault' error

I keep having a persistent error where a vault becomes a data bag after removing a vault item. The commands run to produce this error are knife vault delete VAULT ITEM and then knife vault show VAULT. Once the delete has been performed it is…
Mo Martin
  • 207
  • 3
  • 12
0
votes
1 answer

corrupted keys file in chef vault

Today I saw that all my chef-clients fail to run their recipes becaue they can't decrypt our ssh keys vault. I tried to show my vault and got the following: knife vault show secrets ssh_keys ERROR: Chef::Exceptions::JSON::ParseError: parse error:…
0
votes
0 answers

knife vault show vaultname not showing all users

I have created 7 users in my vault however i am only able to view 5 of them when i do a knife vault show vaultname. When i do a knife data bag show vaultname, i see all 7 users plus their corresponding user_keys items. I am also able to see the all…
jebjeb
  • 115
  • 1
  • 4
  • 12
0
votes
1 answer

Can I grant access to an entire chef_vault or only individual vault items

I'm learning chef_vault. I can go into my vaults and grant admins and clients (nodes) access to vault items inside the vaults, but is there a way I can grant admins and clients access to an entire vault and all its contents? Is there an mechanism…
red888
  • 27,709
  • 55
  • 204
  • 392
-1
votes
1 answer

knife, solo and vault - data_bag_item.rb:129:in `from_hash': undefined method `delete' for nil:NilClass (NoMethodError)

I am using chef solo. How do I deal with knife with chef vault using solo? I posted the below on chef forum but those at opscode are unresponsive sad to say. knife vault create secrets database '{"username": "root", "password": "mypassword"}' …
Tampa
  • 75,446
  • 119
  • 278
  • 425
1
2