You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When running knife vault refresh, both data bag item are always pushed.
I expect them to be pushed only if there are changes.
(We run refresh automatically every minute to have an up to date client list).
This is an issue for us since we compare automatically the data bag files in git (encrypted) with the one on the chef server to decide which object to push to the chef-server.
The frequent refresh actually modifies the encrypted item at each run, thus our comparison does not work correctly.
Examples:
local (encrypted) version of site-data_bags/secrets/aboten_chef_key.json:
I think this issue is partially resolved thanks to #194#202. I close it since the current state works for us. You can reopen it if you think it still requires work.
When running
knife vault refresh
, both data bag item are always pushed.I expect them to be pushed only if there are changes.
(We run refresh automatically every minute to have an up to date client list).
This is an issue for us since we compare automatically the data bag files in git (encrypted) with the one on the chef server to decide which object to push to the chef-server.
The frequent refresh actually modifies the encrypted item at each run, thus our comparison does not work correctly.
Examples:
after one minute,
knife data bag show secrets aboten_chef_key -F json
:The IV and encrypted data are different.
The text was updated successfully, but these errors were encountered: