[chef] Re: Re: Re: Encrypted Data Bag format?

[Jay Perry < >]

Guy,

If all your nodes are using chef 10.18.x and up then you don't need to worry about the new format.  If they are below that then you'll need to recreate your encrypted data bags using a chef 10.x knife.

-- Jay

On Nov 15, 2013, at 4:06 PM, Daniel DeLeo < "> > wrote:

There’s more info in the Chef 11.0 release notes: http://docs.opscode.com/release/11-4/release_notes.html#changes-for-data-bag-encryption

-- 

Daniel DeLeo

On Friday, November 15, 2013 at 1:03 PM, Jay Feldblum wrote:

Guy,

The former is the original format and the latter is the new format. Chef-11 knives that make new encrypted-data-bag-items will make them in the new format by default but can read and write both formats. Chef-11 clients can read both formats.

Cheers,

Jay Feldblum

On Fri, Nov 15, 2013 at 12:58 PM, Guy Matz < " target="_blank"> > wrote:

The format of my encrypted data bag seems to have changed from

{

  "abc": "Aizug0hk7OmzAk1feN8u5jxsDn8oYHfE8gOdga1EmpQ=\n",

}

to this:

"abc": {

    "iv": "/2ZxMWiIVWJzpWRj+8uxJA==\n",

    "cipher": "aes-256-cbc",

    "version": 1,

    "encrypted_data": "0uKackLYg25J6Eoow5LhbkvOGEleT7XT/ueraSwnqB/obRDtASu1qOImuimm\n9MqF\n"

  },

Anyone know what I might have done to my DB, or if an upgrade may have made this change?

Thanks a lot!

Guy