Setup 1password connect accoriding to the official docs https://support.1password.com/secrets-automation/
Set your hiera.yml to lookup from the onepassword lookup.
---
version: 5
defaults: # Used for any hierarchy level that omits these keys.
datadir: data # This path is relative to hiera.yaml's directory.
data_hash: yaml_data # Use the built-in YAML backend.
hierarchy:
....
- name: "Secret data"
lookup_key: onepassword_lookup
options:
vaults:
- 'development'
- 'puppet-common'
url: 'http://localhost:8080' ## you can now also use https
token: 'sometoken'
get_all_fields: true # optional, retrieve everything (as label:value pairs), not just username/password
next try looking up a key. Note items can have the same title inside onepassword. These are now combined and returned as an array. Does not work yet when multiple vaults are defined.
root@puppet:/# puppet lookup mynote
note content
root@puppet:/# puppet lookup dev-db-login
---
username: test
password: test
root@puppet:/# puppet lookup dev-db-pass
--- testpass
root@puppet:/# puppet lookup dev-db-login2
---
- username: test
password: test
- username: web
password: web
These can be referenced in a puppet manifest using:
$var = lookup('dev-db-pass')
$var = lookup('dev-db-login2.password')
$var = lookup('dev-db-login2.password', undef, undef, 'Default Value')if get_all_fields is set to true in the options, all fields set on a credential are returned from 1password,
using label as the key:
puppet lookup 'Test Credential'
---
username: root
password: my_password
notesPlain: 'This is a password for some server'
text: test
text2: test2
These can be referenced in puppet via:
$var = lookup('Test Credential.text2')
# or, with a default value:
$var = lookup('Test Credential.text2', undef, undef, 'Default Value')
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent