How to give value in runtime for chef

Question

I got stuck with a scenario where I need to provide runtime value while restarting/starting httpd service using Chef.

I installed SSL certs where it asks password for every reload or start. I tried giving:

service 'httpd' do
  supports restart: true, reload: false, status: true
  options "password"
end

But I don't have any luck.

Any help about how to pass this value while httpd restarts using Chef?

Hauleth · Accepted Answer · 2017-08-20 14:25:26Z

2

You shouldn't. Instead you should use proper secrets management system that would provide you unlocked SSL certificate.

By secret management I mean tooling like k8s secret management or Vault.

answered Aug 19, 2017 at 16:29

Hauleth

4562 silver badges9 bronze badges

Maybe you could elucidate what proper secrets management means to you.
– chicks
Commented Aug 20, 2017 at 12:46
@Lukasz we need to have SSL certificates to maintain our security.
– pandey
Commented Aug 20, 2017 at 14:03
@pandey I am not saying that you should resign from SSL but from the fact that your certificate need password. This is the problem.
– Hauleth
Commented Aug 20, 2017 at 14:21
Yes right, so can we provide this password while reloading. A httpd
– pandey
Commented Aug 20, 2017 at 14:22
The point of my post is that there should be no password at all. Instead your httpd server should have access to the certificate as is, without any additional information. Here you can find how
– Hauleth
Commented Aug 20, 2017 at 14:26

| Show 1 more comment

1 Answer 1