Using Puppet Deferred functions to provision secrets on your infrastructure

1 · Hootsuite · April 6, 2022, 2:29 p.m.
A small introAt Hootsuite in our Measure portfolio, we use Puppet 5 to provision a handful of components in our infrastructure and some of these components also contain secret keys or tokens that must not be seen by other nodes or be stored on disk like the other static configurations or templates that we have. These keys are fetched from a secret store and are decrypted only at runtime on the targeted component versus the classic process of compiling a catalog on the server and sending it to th...