Chef Vault
Securely manage passwords, certificates, and other secrets in Chef by encrypting data bag items with node public keys.
What is Chef Vault?
Chef-Vault is a Ruby gem that securely manages secrets like passwords and certificates within Chef, the infrastructure automation platform. It encrypts Chef Data Bag Items using the public keys of specific Chef nodes, ensuring only those nodes can decrypt the data. This solves the problem of securely distributing sensitive information across a Chef-managed infrastructure without storing secrets in plaintext.
Chef users and DevOps engineers who need to securely manage and distribute secrets (e.g., passwords, API keys, certificates) across their Chef-managed nodes. It is particularly valuable for teams using Chef for configuration management and infrastructure automation.
Developers choose Chef-Vault because it provides a native, secure way to handle secrets within Chef's ecosystem using public-key encryption, eliminating the need for plaintext secrets in data bags. Its tight integration with Chef tools (like knife and recipes) and support for both client and solo modes make it a robust solution for secret management in Chef environments.
Overview
Securely manage passwords, certs, and other secrets in Chef
Use Cases
Best For
- Securely storing database passwords in Chef-managed infrastructure
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
