criteo-cookbooks / chef-secrets Goto Github PK

- name: default
  run_list:
  - recipe[XXX]
  attributes:
    chef_secrets:
      fake:
        secret:
          user: password

secret_with_default = chef_vault_item_or_default('fake', 'secret', 'default')
secret = chef_vault_item('fake', 'secret')

if secret['user'] != 'password'
  Chef::Log.info 'secret != password'
  raise
end

if secret_with_default['user'] != 'password'
  Chef::Log.info 'secret_with_default != password'
  raise
end