From abe1c59f115127850f2dfc7e3502087f38add4dd Mon Sep 17 00:00:00 2001
From: Leif Johansson <leifj@sunet.se>
Date: Fri, 12 Jul 2019 16:43:23 +0200
Subject: [PATCH] hiera eyaml config

---
 global/overlay/etc/puppet/hiera-eyaml.yaml | 27 ++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 global/overlay/etc/puppet/hiera-eyaml.yaml

diff --git a/global/overlay/etc/puppet/hiera-eyaml.yaml b/global/overlay/etc/puppet/hiera-eyaml.yaml
new file mode 100644
index 00000000..c4044bac
--- /dev/null
+++ b/global/overlay/etc/puppet/hiera-eyaml.yaml
@@ -0,0 +1,27 @@
+---
+:backends:
+  - eyaml
+  - yaml
+
+:logger: console
+
+:hierarchy:
+  - local
+  - group
+  - secrets.yaml
+  - "dist_%{::lsbdistcodename}_override"
+  - common
+
+
+:yaml:
+   :datadir: /etc/hiera/data
+
+:eyaml:
+    :datadir: '/etc/hiera/data'
+
+    # If using the pkcs7 encryptor (default)
+    :pkcs7_private_key: /etc/hiera/eyaml/private_key.pkcs7.pem
+    :pkcs7_public_key:  /etc/hiera/eyaml/public_certkey.pkcs7.pem
+
+    # Optionally cache decrypted data (default: false)
+    :cache_decrypted: false