Here is my cookbook code,
include_recipe 'aws'
require 'aws-sdk'
client = Aws::S3::Client.new(region: 'us-east-1')
bucket = client.get_object(bucket:'chefconfig', key: 'encrypted_data_bag_secret')
# Read content to variable
file_content = bucket.body.read
# Log output (optional)
Chef::Log.info(file_content)
# Write content to file
file '/etc/chef/encrypted_data_bag_secret' do
owner 'root'
group 'root'
mode '0755'
content file_content
action :create
end
password_secret = Chef::EncryptedDataBagItem.load_secret('/etc/chef/encrypted_data_bag_secret')
docker_password_data_bag_item = Chef::EncryptedDataBagItem.load('passwords', 'docker_server_master_password', password_secret)
docker_service 'default' do
action [:create, :start]
end
docker_registry 'https://index.docker.io/v1/' do
username node['docker']['username']
password docker_password_data_bag_item['password']
email node['docker']['email']
end
I thought file
resource will create /etc/chef/encrypted_data_bag_secret
first and will be available for Chef::EncryptedDataBagItem.load_secret
but when I run this cookbook I start getting following error message.
================================================================================
Recipe Compile Error in /var/chef/cache/cookbooks/appservers/recipes/default.rb
================================================================================
Errno::ENOENT
-------------
No such file or directory - file not found '/etc/chef/encrypted_data_bag_secret'
Cookbook Trace:
---------------
/var/chef/cache/cookbooks/appservers/recipes/docker.rb:29:in `from_file'
/var/chef/cache/cookbooks/appservers/recipes/default.rb:9:in `from_file'
Since I am adding this cookbook while bootstrapping node so I have no idea how to supply secret file during bootstrap.