salt/changelog/62120.added at bcf5dd82ed4d96d617175b0af00c6cf25625f819 - saltstack/salt - Jubjub's forge

saltstack/salt

mirror of https://github.com/saltstack/salt.git synced 2025-04-16 09:40:20 +00:00

Marcus Rückert bcf5dd82ed Make the pass renderer more configurable

1. Allow us to make the pass renderer fail during pillar rendering
   when a secret corresponding with a pass path cannot be fetched.
   For this we add a master config variable pass_strict_fetch.

2. Allow to have prefix for variables that should be processed
   with the pass renderer.
   For this we add a master config variable pass_variable_prefix.

3. Allow us to configure pass' GNUPGHOME and PASSWORD_STORE_DIR
   environmental variables.
   For this we add master config variables pass_gnupghome and pass_dir.

2022-09-27 13:57:51 -06:00

4 lines

346 B

Text

Raw Blame History

 Config option pass_variable_prefix allows to distinguish variables that contain paths to pass secrets.
 Config option pass_strict_fetch allows to error out when a secret cannot be fetched from pass.
 Config option pass_dir allows setting the PASSWORD_STORE_DIR env for pass.
 Config option pass_gnupghome allows setting the $GNUPGHOME env for pass.