We installed *hiera-eyaml* rubygem as the *root* user on the Puppet Master
node to encrypt/decrypt our passwords.
# /opt/puppetlabs/bin/puppetserver gem install hiera-eyaml --no-doc --no-ri
--verbose
# /opt/puppetlabs/puppet/bin/gem install hiera-eyaml --no-doc --no-ri --verbose
*eyaml* command seems to work fine on the commandline to encrypt/decrypt
passwords and also edit the *.yaml files containing the passwords
# /opt/puppetlabs/puppet/bin/eyaml
Our Hiera file :
:backends:
- eyaml
- yaml
:eyaml:
:datadir: "/etc/puppetlabs/code/environments/%{environment}/hieradata"
:pkcs7_private_key:
/etc/puppetlabs/puppet/eyaml-keys/%{environment}/%{::zone}/private_key.pkcs7.pem
:pkcs7_public_key:
/etc/puppetlabs/puppet/eyaml-keys/%{environment}/%{::zone}/public_key.pkcs7.pem
:cache_decrypted: false
:extension: 'yaml'
:yaml:
:datadir: "/etc/puppetlabs/code/environments/%{environment}/hieradata"
:hierarchy:
- "environments/%{::environment}/%{::zone}_secure"
- "environments/%{::environment}/%{::zone}"
- "environments/%{::environment}/%{::environment}"
- "roles/%{::role}"
- "common"
- "versions/artifact-versions"
Note : zone and role are our external facts
We also restarted PuppetMaster and reinstalled hiera-eyaml. We have the
same issue.
PuppetMaster is unable to decrypt the passwords during a puppet agent run
for us . It produces the following error :
[puppetserver] Puppet Evaluation Error: Error while evaluating a Function
Call, Cannot load backend eyaml: no such file to load --
hiera/backend/eyaml_backend at
/etc/puppetlabs/code/environments/production/manifests/site.pp:2:10 on node
Any ideas?
I have enclosed the below version information that we use :
*Puppet Version : 4.7.0*
*pe-puppetserver-2016.4.0.1006*
*pe-puppet-enterprise-release-2016.4.2.0*
*puppet-agent-1.7.1*
64-bit, RHEL 7.3 (Maipo)
# /opt/puppetlabs/bin/puppetserver gem list --local | grep -E
"(eyaml|trollop|highline)"
hiera-eyaml (2.1.0)
highline (1.6.21)
trollop (2.1.2)
# /opt/puppetlabs/puppet/bin/gem list --local | grep -E
"(eyaml|trollop|highline)"
hiera-eyaml (2.1.0)
highline (1.6.21)
trollop (2.1.2)
# /opt/puppetlabs/puppet/bin/ruby --version
ruby 2.1.9p490
# /opt/puppetlabs/puppet/bin/gem --version
2.2.5
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/54d7bb0c-3b44-4275-9b06-005793735ef2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
