Skip to content

Commit

Permalink
Improve
Browse files Browse the repository at this point in the history
Signed-off-by: Christian Berendt <[email protected]>
  • Loading branch information
berendt committed Jun 16, 2024
1 parent 778174e commit d4c9b8c
Showing 1 changed file with 16 additions and 8 deletions.
24 changes: 16 additions & 8 deletions docs/guides/configuration-guide/configuration-repository.md
Original file line number Diff line number Diff line change
Expand Up @@ -483,22 +483,30 @@ $ osism apply facts
ERROR: The configuration repository is locked.
```
## Working with encrypted secrets
## Working with encrypted files
To make it easier to work with secrets, the Configuration Repository has several make targets that can be used to display and change them.
To make it easier to work with encrypted files, the configuration repository has several make
targets that can be used to view encrypted files and to edit encrypted files.
* Show secrets in all encrypted files.
This opens a pager, e.g. less, and you can search with `/` for specific files, keys and passwords.
* Show all encrypted secrets
(This opens a "less" pager, you can search with `/` for files, keys and passwords
```
make ansible_vault_show
```
* Change or add secrets secrets
(your $EDITOR is opened
* Change or add secrets in an encrypted file with the editor set in ` $EDITOR`.
```
make ansible_vault_edit FILE=environments/secrets.yml EDITOR=nano
```
* Re-encrypt all data with a new secret
* Re-encrypt all encrypted files with a new key.
This creates a new `secrets/vaultpass` and creates backups of the old to
`secrets/vaultpass_backup_<timestamp>`.
```
make ansible_vault_rekey
```
This creates a new `secrets/vaultpass` and creates backups of the old to `secrets/vaultpass_backup_<timestamp>`.

0 comments on commit d4c9b8c

Please sign in to comment.