[英]How to add node to list of clients that can access a data bag on a Chef Server?
I want/need one of my nodes to access a data bag on my chef server. 我希望/需要我的一个节点访问我的厨师服务器上的数据包。 The purpose is to get a decrypted ssh key so i can clone from a private repo.
目的是获得一个解密的ssh密钥,以便我可以从一个私人仓库克隆。 I've been trying many variations of
我一直在尝试很多变种
knife vault update data_bag item -A 'name-of-node'
But I do not see the node come up on the list of clients with access. 但我没有看到该节点出现在具有访问权限的客户端列表中。
What am I doing wrong in this command or need to do to get this to work? 我在这个命令中做错了什么或者需要做些什么才能使它工作? I've been following this guide , but I'm not using roles.
我一直在关注这个指南 ,但我没有使用角色。
Figured out that this command works for updating, but it basically adds all nodes and users. 弄清楚这个命令适用于更新,但它基本上添加了所有节点和用户。 Would prefer a more precise answer for just an individual node if someone has one.
如果有人拥有一个节点,则更愿意为单个节点提供更精确的答案。
knife vault update data_bag item --search '*:*' --admins me --mode client
https://github.com/chef/chef-vault/issues/181 https://github.com/chef/chef-vault/issues/181
https://github.com/chef/chef-vault/blob/master/THEORY.md https://github.com/chef/chef-vault/blob/master/THEORY.md
EDIT: 编辑:
As the user in the comments mentioned, this too works and is more correct. 作为评论中提到的用户,这也是有效的,也更正确。
knife vault create data_bag item '{"itemname":"securepass"}' --search 'name:my-node-name' --admins me --mode client 刀库创建data_bag项'{“itemname”:“securepass”}' - 搜索'名称:my-node-name'--admins me --mode client
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.