Jira (BOLT-631) Bolt should support hiera configuration and use it when compiling catalogs

[Cas Donoghue (JIRA)]

Title: Message Title

Cas Donoghue commented on BOLT-631   Re: Bolt should support hiera configuration and use it when compiling catalogs In order to test apply compatibility with Hiera 5 using a non-built-in data provider (YAML, JSON, and HOCON) we use data stored as eyaml. The test is documented below. Test with eyaml backend:  Setup Install hiera-eyaml (2.1.0) on bolt controller  Generate pkcs7 keypair Hiera config --- version: 5 hierarchy: - name: "Secret data" lookup_key: eyaml_lookup_key # eyaml backend paths: - "common.eyaml" options: pkcs7_private_key: /home/cas/working_dir/bolt/keys/private_key.pkcs7.pem pkcs7_public_key: /home/cas/working_dir/bolt/keys/public_key.pkcs7.pem - name: "Normal data" data_hash: yaml_data # Standard yaml backend paths: - "common.yaml"  Hiera data # data/common.yaml --- unencrypted_data: "not sensitive"   # data/common.eyaml --- encrypted_data: ENC[PKCS7,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] Test plan plan test (TargetSpec $nodes) { return apply($nodes) { notify { "Unencrypted: ${hiera('unencrypted_data')}, Encrypted: ${hiera('encrypted_data')}": } } } result bolt plan run test -n n2bf1pq56lj9or5.delivery.puppetlabs.net Starting: apply catalog on n2bf1pq56lj9or5.delivery.puppetlabs.net Finished: apply catalog with 0 failures in 2.62 sec [ { "node": "n2bf1pq56lj9or5.delivery.puppetlabs.net", "status": "success", "result": { "host": "n2bf1pq56lj9or5.delivery.puppetlabs.net", "time": "2018-07-16T17:24:06.537659675+00:00", "configuration_version": 1531761845, "transaction_uuid": null, "report_format": 10, "puppet_version": "6.0.0", "status": "changed", "transaction_completed": true, "noop": false, "noop_pending": false, "environment": null, "logs": [ { "level": "notice", "message": "Unencrypted: not sensitive, Encrypted: sensitive data", << ***DECRYPTED DATA AVAILABLE TO APPLY*** "source": "Puppet", Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.