cegeka / puppet-secretserver

puppet-secretserver module¶ ↑

<img src=‘https://jenkins-iac.cegeka.be/job/puppet-secretserver/badge/icon’ />

A Puppet Module for working with Thycotic Secret Server.

Installation¶ ↑

1. Install the following gems on your Puppet Master:

* savon, excon

1. Install puppet-secretserver as a module in your Puppet master’s module path

2. Update the ‘ss_hostname`, `ss_username`, `ss_password`, `ss_ssl_ca_cert_file` and `logging_enabled` in the `secretserver.yaml` file with the correct credentials and copy the file to `/etc/puppet/`

Usage¶ ↑

$password = ss_get_password("secret_name")
$password = ss_get_password("secret_name", "secret_template_name")
$password = ss_get_password("secret_name", "secret_template_name", "folder")

Current functionality¶ ↑

• Retrieving a password based on a search string

• Retrieving a password based on a search string and secret template

• Retrieving a password based on a search string and secret template and folder name

If the folder provided doesn’t exist, a Puppet Error will be thrown. If multiple secrets are found for the given search criteria, a Puppet Error will be thrown.

TODO¶ ↑

• Ability to also return the hashed password

• Generating a password