summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorEric Williams <eric@subcritical.org>2019-02-25 19:09:39 +0000
committerServer Team CI Bot <josh.powers+server-team-bot@canonical.com>2019-02-25 19:09:39 +0000
commit8cfcc28db1acc7594dbbf76b846f4964f40f9e63 (patch)
treeac44551ef435e5d5e1d59dd7a84bb30608883417 /doc
parent34f54360fcc1e0f805002a0b639d0a84eb2cb8ee (diff)
downloadvyos-cloud-init-8cfcc28db1acc7594dbbf76b846f4964f40f9e63.tar.gz
vyos-cloud-init-8cfcc28db1acc7594dbbf76b846f4964f40f9e63.zip
Enable encrypted_data_bag_secret support for Chef
Encrypted data bags require a secrets file to be present to decrypt, and the location of the file must be configured the Chef client configuration file, client.rb. This update enables cloud-init's chef module to update that setting in client.rb. LP: #1817082
Diffstat (limited to 'doc')
-rw-r--r--doc/examples/cloud-config-chef.txt3
1 files changed, 3 insertions, 0 deletions
diff --git a/doc/examples/cloud-config-chef.txt b/doc/examples/cloud-config-chef.txt
index defc5a54..2320e01a 100644
--- a/doc/examples/cloud-config-chef.txt
+++ b/doc/examples/cloud-config-chef.txt
@@ -98,6 +98,9 @@ chef:
# to the install script
omnibus_version: "12.3.0"
+ # If encrypted data bags are used, the client needs to have a secrets file
+ # configured to decrypt them
+ encrypted_data_bag_secret: "/etc/chef/encrypted_data_bag_secret"
# Capture all subprocess output into a logfile
# Useful for troubleshooting cloud-init issues