Encrypting private pillar data on your salt master
And thus you can push your code to git without exposing your secrets
Prerequisites: Have a salt master and a salt minion configured Have data which you want gpg encrypted Introduction I presume that anyone reading this blog is aware that it is not done to paste plaintext passwords in code (commited to git) (albeit a prive repo or not). Therefore since the release of salt 2016.3.0 it is possible to encrypt sensitive data with gpg keys.
Short introduction to gpg:
Pretty Good Privacy (PGP) is an encryption program that provides cryptographic privacy and authentication for data communication.
[Read More]