[chef] Re: Re: Encrypted Data Bag format?


Chronological Thread 
  • From: Guy Matz < >
  • To:
  • Subject: [chef] Re: Re: Encrypted Data Bag format?
  • Date: Fri, 15 Nov 2013 16:12:26 -0500

Thanks!  You say Chef 11 will create D-Bags in the new format "by default" . . .  is there a way to get it to use the old format?  knife data bag edit|create --help does not indicate a way . . .

Thanks again!


On Fri, Nov 15, 2013 at 4:03 PM, Jay Feldblum < " target="_blank"> > wrote:
Guy,

The former is the original format and the latter is the new format. Chef-11 knives that make new encrypted-data-bag-items will make them in the new format by default but can read and write both formats. Chef-11 clients can read both formats.

Cheers,
Jay Feldblum



On Fri, Nov 15, 2013 at 12:58 PM, Guy Matz < " target="_blank"> > wrote:
The format of my encrypted data bag seems to have changed from
{
  "abc": "Aizug0hk7OmzAk1feN8u5jxsDn8oYHfE8gOdga1EmpQ=\n",
}

to this:
"abc": {
    "iv": "/2ZxMWiIVWJzpWRj+8uxJA==\n",
    "cipher": "aes-256-cbc",
    "version": 1,
    "encrypted_data": "0uKackLYg25J6Eoow5LhbkvOGEleT7XT/ueraSwnqB/obRDtASu1qOImuimm\n9MqF\n"
  },

Anyone know what I might have done to my DB, or if an upgrade may have made this change?

Thanks a lot!
Guy





Archive powered by MHonArc 2.6.16.

§