[chef] Re: Re: Re: data bags and recipe

[Jay Feldblum < >]

Dorian,

You can simply store an encrypted version of the password in the node's attributes. You can use the normal Ruby OpenSSL stdlib to do the encryption (the encrypted data-bag code does that under the hood).

You can even use the encrypted-data-bag key for this purpose, provided the key management procedures are appropriate.

You do not need to write to encrypted data-bag items from within recipes.

Cheers,

Jay Feldblum