0

I'm working on storing some sensitive data stored in my salt pillar files away, into an external DB (possibly Redis).

I could not help wondering if it is possible to request the externally stored data from within the pillar files, so that I can use the benefits of globbing in pillars.

Example, in my Redis DB, I store a key_value pair: mysql_pass: superSecretPassword

And inside my salt master, under pillar/top.sls, I do the following:

'minion_1':
  - mysql_pass: redis_db.get('mysql_pass')

This will return the value and assign it to mysql_pass, which will go on becoming an active pillar for minion_1.

Is this above all, possible? And if it is, is this a good idea to go this way (considering the fact that I have a lot of globbing being done in my pillar files)

0 Answers0