/var/lib/maxscale/.secrets

[linuxmail]

hi,

I had to do the following, after install:

# maxkeys
# chown maxscale: /var/lib/maxscale/.secrets
# maxpasswd /var/lib/maxscale/ topsecret
<copy hash into manifest>

Do I overlook something, that it wasn't done after installing?

cu denny

[aerostitch]

Hi,

Having encrypted password outside of the maxscale.cnf is not yet supported by the module.
For now the clear-text passwords can be stored in maxscale.cnf using maxscale::services_conf.
But it would be a good thing to have that part added to the module.

Joseph

[linuxmail]

hi @aerostitch

didn't try it, because in our configuration I saw only hashes and I had to read the documentation, what the .secrets is. If I want to use the plaintext, I have to store it in Eyaml, and than, I run into the same problem, like my other issue :-) -> Manifest + Hiera

cu denny

[aerostitch]

It would be a nice feature to add this secrets management to the module.
But yes, it is totally doable to have it in eyaml in hiera. For examples of those, check the readme, there's a bunch of configurations specified woth puppet syntax and their equivalent in hiera in the "Usage" section.