Skip to content

stupid command line tricks

Jump to bottom
Ed Silva edited this page Dec 13, 2019 · 5 revisions

create a new file:

$ generate-secure-pillar -k "Ed Silva" create -n "super:secret:password" -s "password" -o blah.sls
INFO[0000] wrote out to file: 'blah.sls'

$ cat blah.sls
#!yaml|gpg

super:
  secret:
    password: |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAAMR8uujifd6zQINZ0itVDc/v2aYVlxWVkM/jfy1xg4Guw
      ItqU2pWqbaA5Xg24rNGl3tDkPJsrBLiGheEc+L4B8H6W+YJ+W8rOK191DBv49GIC
      5N/BicriGydKeBpl1mxVIebt4Yyh+ltqCtMAID+BCRRcEEWAuEjXn08xqbTx22yS
      r4BAySdRV8pCuLTtqrwZutLq8gf2zKwv9kmGlFcfoH8YXq7IXeVLZhLdvI2zwn9s
      l+zlBbCu8Gy8B3t3znnPFqiCsr79/wbtYbc/mN5JwH4S/BV/SOIsVzE/WB4r3+ih
      H0N5DGa3oPcy21lNxQKj7gC0ncPQXFBdhWtVt6fViKICoHDvuT2nqR/CrZqN96hQ
      CwZRkzFMAkpQFHC0maioxqsJko1X2VgxeFs9E73QvA2Rq5VHW9KASAMUkUMSJJ15
      lJWLI76kIaVuJn7PiWfYWi6qoTPrl+OnzrGPiE8djeGdMZKpkO46kIgB6qG9wVK8
      3jZ6JmLWxUcmIJRffsnFchsagTeT/xpxq6KA4DE5TPrSy7sh4UcNVHGqHi+QGjP0
      rUcB+ZdQVprP8u2BpcfYZnDQsM7SZwmP8+OF4gcRKcG31kuFma1MmKxN1iFqqF+s
      iw7v9qYZvcV/Nus5/vPraBAbPZZ+d7gWy0WSr8ZKD6zYFsHcgtybdQNgdoj0973S
      4AHk4VTZgsRKRsHA4BImqd7QIOEys+Au4JThDyfgNeKUXx6n4EbhuDTgyuR6O+RC
      ME3voo00gnp5IZau4sE7dPjhQWIA
      =kA4/
      -----END PGP MESSAGE-----

if you have the secret key you can decrypt to make sure it's all good

$ generate-secure-pillar decrypt all -f blah.sls
#!yaml|gpg

super:
  secret:
    password: password

add a new element to the file

$ generate-secure-pillar -k "Ed Silva" update -n another:super:secret:thing -s 'suuuuper secret!' -f blah.sls 
INFO[0000] wrote out to file: 'blah.sls'                

$ cat blah.sls
#!yaml|gpg

another:
  super:
    secret:
      thing: |
        -----BEGIN PGP MESSAGE-----

        wcFMA/18BRYacDTHARAAWjYA8z/8rAN4yZmtEJ6wW6Mg8agLG0FybJ28p3NKXIOb
        2Pa7TuneYlpGPtIM7lVcCHMkhAka5rSEqCnpdLQ4Ta38Ad3MnBOU3/mk3Qdc1clY
        p5LeHkqjN8E7zLTsdfXQ17Ea+FF5v8q7tR7P5xvtttKS/5qt45EcOrRaSubdmGDL
        wF1Dp8vRTUcszzpIGguazqWZ1YGzOxTh2tCBxeiYuMr28OgiUHiMbrBYzfw2bFGC
        YiSP6Sr1UQ1xWNci9awESCdai6OSouxoaEZJMsYEciDLSE7MCEkbn/t6WL+Srwdz
        3gfP/XGmzGkbgg1wD7Xee0oHvEoa7ffr3oQjOlx1g4pH/hTbqv7aHR/3WextsoET
        YJl7zAnwMfw662o8pwj6RvFFalgRLm2/X8ZXgA5CS4AFLAIidCun79371yycHaC9
        YOcov/hCN47wdr2wCgB6pbCyCwunFh/rCOeGYXnJ6ZIGIiN87JOWL1q80UCaq888
        P7HNeBVD5xbLh60ALzbx4deOTgNx6+g1byOn7gWtbHfxlzjw157Rv8w0RrbwgWVI
        qVm39wYME2MYyqhSJxNkLarzN10yWDXGp30dzTnMBrrLjtfsWjW35QMddvcJlecK
        CVuZtIr7Ex0FRogs9W2gLvVCiTb9skuhdwsi1epnJby9YDCRI/u7QMbFMQO+qbXS
        4AHkYHqf30kGG2HEPPW7RWVUjOEEZOCA4BnhNdLgN+IxNYDB4JPk46CZZCIcwJN1
        ypDKSsEyyOCy5EtDZs9UOi617vkGx5T0fkriSW8EDuHyngA=
        =nB5M
        -----END PGP MESSAGE-----
super:
  secret:
    password: |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAAZLduv5ZNiQw2r8kU7HhLubzqKB+k4S1TUSSWdZr00JwT
      th7+t/kxKiDuUlrBmUZqNNvj6IlBds2gj8NONBpGkZf7othDMjLkuef2NpUHN2qU
      rxG0U8cvr3mexAsJJCab6MYprSLoGemguF7nvWd50MS0lxsPq+eyMzxlsccqjjxh
      JmYP7R2kPvTWpVYIrJVPb6Vexiadkm9VYnv+LPwyCLqybHAVAmaT82jkfG4tdhNr
      +mu/4MuIhUAhLTxmTfV1CnnhLjAsFwNqg34ykKNAt89bFCGGYcBEi1vYtvRO9LTm
      1yQNOxvVvFVyahKnDNdPyVrCabZ/0y+wWEsrwqcwrRPnTFe3mXINuvKZtMGtfC2l
      xhbVgxLt+WKwTVqaGp/yywwYrkzAbz8Dn66Jvw+aBX9L4xzbvTnL5ZEVEwjpfjtC
      IyA6L7YkwZvBKEP0n43qEU11UmXT4G/G7BfBpi03w0/6RNa6bYREMfvJ0aXpCToA
      cmh36AVsuctb7UG0H18J1OioLEiANcCTJY/9zLsJJhTVhXQDgJCxmyWkqIo407eY
      12WFldscsPKjZN0dR26HMgZoyOtQ3rp9l7o02p8r6zYdTKHbxtOKyePP+oA81I6C
      3Qk7V2Yb1fDBg/0QWAJiamz/KPqQ65AMlRE2lKV9LR6psjrDDawJM2fxCc0Ya5jS
      4AHkONcK0hIG078BptYBWeY5FOG4QOB54IbhZq3gueJx2YoJ4NjjVBe0kBEBISLg
      huSHr7baMllol16UvHmQ74We4h16dXThPCUA
      =ztRd
      -----END PGP MESSAGE-----

$ cat blah.sls | generate-secure-pillar decrypt all
#!yaml|gpg

another:
  super:
    secret:
      thing: suuuuper secret!
super:
  secret:
    password: password

view the key(s) used on a file

$ generate-secure-pillar keys all -f blah.sls
another:
  super:
    secret:
      thing: '23FB4B72AD2680F7: Ed Silva <ed.silva@everbridge.com>'
super:
  secret:
    password: '23FB4B72AD2680F7: Ed Silva <ed.silva@everbridge.com>'

change the PGP key used

$ generate-secure-pillar -k "Dev Salt Master" rotate -f blah.sls
INFO[0000] processing blah.sls                          
INFO[0000] wrote out to file: 'blah.sls'

$ generate-secure-pillar keys all -f blah.sls
another:
  super:
    secret:
      thing: 'FD7C05161A7034C7: Dev Salt Master (For Development Environment Only)
        <nobody@everbridge.com>'
super:
  secret:
    password: 'FD7C05161A7034C7: Dev Salt Master (For Development Environment Only)
      <nobody@everbridge.com>'

decrypt a specific element

$ generate-secure-pillar decrypt path -p super:secret:password -f blah.sls

super:secret:password: password

only encrypt stuff under a specific element

$ cat foo.sls
#!yaml|gpg

secrets:
  something: something
  super:
    secret: blah
some:
  other:
    things:
    - thing one
    - thing two

$ cat foo.sls | generate-secure-pillar -k "Dev Salt Master" -e secrets encrypt all -o foo.sls
#!yaml|gpg

secrets:
  something: |
    -----BEGIN PGP MESSAGE-----

    wcFMA/18BRYacDTHARAAjuw4OyKMpuAz8N1eXcmMTVw4KiApsPYRErurCX+RQH3/
    dsXVNCWNAa+tdwcWWmvTSeapRNlxfU0sF0Vq0/mMM99MBT4aX3yIxkJmOb8CwABd
    CWdoNLGzKiHYUoSJKtT50pa5VLP5U8NMPKGf+6Ia623r/JtiZQF5zcuXVEGFHqbZ
    sJL0xXkPtQaCeTlIZDo7SXo3YwqK1CDNAKhlYqrvULE8zGGiEeguiDQdKXS1aeLU
    tPWhGCg6KJprSAc33rtrdkBu6i8Fxls6Vr2sInvjdSZU1+C+lXKae7+Pzt6GOKH2
    xldZ5TMXcqnqHZJDLg+qp405n7s0S34KvEahd3iUgszXlk7mv/3Mw0ZS8IOIVteK
    93lVzeNQJJTL3SxM0IfzGCCWwJPyRIgUBWSeFk1pFdsBNyu2bkiZB6K50Fk6kR7U
    CU9YjTZt4t3KRAjPqI1qpKVpmEw8tKS63u/mqpeV9BTDdNCbkL8roKPVfKV+HmTw
    p/KSYyAHLAKzL2xF8hcWhr/V3i0608xS8IiEPIOaordgcmBQL3AecbGQaimRCTVd
    GarfOmUPyu1rVhBGaThn8q9sgQVNe4ovDZQmBl7CAvaSNiOAjOJ32wc3rvIZhqYX
    G+XL4IRjxJAZWGJV6OWZWI1jzFHhtJJCT9rncaDh7L2hGP6Se0F+HyhKutRjstnS
    4AHk+9iExjxJokAdjsoJX0SrReG0UODy4BvhHjHgouKCNism4EfjSoOeFW03oSng
    CuA04HDky8dNA3rYHt6oYwrygmP+DeJ/Rmmy4TXWAA==
    =Fp1E
    -----END PGP MESSAGE-----
  super:
    secret: |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAAa9/93VRf5SAaraMDGMpz8Eh8hCW9gXNptI3jI15YgFKR
      QRxwUGOtKB/JQnBMHp9pkPkSaoecI6Wr2UtM1UsAGmoacck5Pm79bYRXDWS2DW81
      /slG12WuFMO0KEgziC0xJNt7TdXgsX6qTyn7ElGjdbPZVdm/0b3LGBaCzIKigm4D
      2OkIEje88Ge5H2vvsSMfU7nrb4wP+pyZjEXJqVleRE7PRCuPyvODBYAR88tCMeQR
      2NkNQ5khdA0jvzd+ms126MdJlA5L/s0M4aNQDo4YVGhgRApijDLtP99vjPU/rm95
      3607En+k81h4b4oI/1NwKW45qtR9beQATQifF147DNbkIysJGXERGZFTVjihGCTZ
      yuKnArBHJkKCODItspB9mE8tvIsZqOHpD/a6wfLALOeCnhS9FZLMHvSEXW215vXX
      SeiZqeAkSFYnCwnKOXm+kj8iKXwiarHKjvea94w28rIbpGLhnOvbQoZuebmUq3/d
      ahyUvvAAM9H8snwQ6UEF1weUGzYFN3M1/K9HnUPLJwEXSrwogjH1SDzI+2mZIu4u
      F1y1I5Jr5R2aL228KWi3DYhknypquZ/TFuhWTjkeeKWJVeIkQtHg5TM2w1DgdmkS
      jrboXPmDfMAMoAlZXBhPCzSAn6ecOLjVEyydQG7Jg0cvh42AaAGmKuekLFPg4AzS
      4AHk2Y4QRICl/63iV5872rr3a+EzneCs4Erh6QPg7+LE8dvM4G7iJoe+KuB45OMQ
      TxPIy9r5WHe8ov2a0ULiNuYneeHn/AA=
      =ez9p
      -----END PGP MESSAGE-----
some:
  other:
    things:
    - thing one
    - thing two

just goofing off because reasons

$ cat foo.sls
#!yaml|gpg

some:
  other:
    things:
    - thing one
    - thing two
super:
  secret: blah
$ cat foo.sls | generate-secure-pillar -k "Dev Salt Master" encrypt all | generate-secure-pillar decrypt all
#!yaml|gpg

some:
  other:
    things:
    - thing one
    - thing two
super:
  secret: blah

$ cat foo.sls | generate-secure-pillar -k "Dev Salt Master" encrypt all | generate-secure-pillar keys all
some:
  other:
    things:
    - 'FD7C05161A7034C7: Dev Salt Master (For Development Environment Only) <nobody@everbridge.com>'
    - 'FD7C05161A7034C7: Dev Salt Master (For Development Environment Only) <nobody@everbridge.com>'
super:
  secret: 'FD7C05161A7034C7: Dev Salt Master (For Development Environment Only) <nobody@everbridge.com>'

use stdin to decrypt two files

$ cat foo.sls bar.sls
#!yaml|gpg

foo:
  bar:
    baz: |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAARkA17itt7A2gloMQmaYCWSv4mOajgxPEN4L+MMm+HuSX
      uci4S3xKjstyE+xKuh0exvtVEvmNiaGb5YRSqi2VJO4hN9I6zgRVFIuvVyA5sqB/
      SGvCLPpKJdlV3zZMRtV835fNIqL6LdwRV5cqSpqNnR/q+F3+4h1sfus5hYxhrpZP
      TGcr898ZjVgKe7/qTrrFuI1DLt7ocL+KZTTaYCkusUcS2axHORu7IIriGi9O3BUH
      gnJ+mig9fBox869Vti5iC/7bK45j87tdSmt7Fg53kkjFwH7nZXPu/0Vev2nHErS1
      zAg/t4luJxv2nmUg8+R2Y1LtLkrDZJg7j//rJfEl9dFsQ5iymNUcAGZbFBQIWlA+
      9Ida5lKITU9AnnQsImow+/HUijzbIGubOGcZIY6S+wPfImNZm7BzjRIgYuR64jOf
      RwjXgshzd1TiHVb/hF9X7VgZE3yz5JNuySJVADZ+3G7cm5jp0cfw8YioMs+U259P
      o0z59P2cOZiJxiO8HsXEX9WIgMYfOi/cJ+b6+sGDff86GT33dKzgzR8VATSpCwpS
      pKkBtHMnsmKTp68DHFlb1vbS0NhZeqbBwQqJ7Rlrj5wezq5nz37ffS/yFLGg468e
      bnxoNaWumWVvylTZFiT5218mg7uv7AzrsvlwXRFh8ZsoOQ7LVSf+IXMY6BSaLcrS
      4AHkI1fMTJrJzBQd8h4RvG/mweFBNeC/4NjhIRHgyuKDrrFM4G3ia7mRNuDo5NN2
      xmx9Fn7HOa8xiqhTGRniymJ3JuEZBwA=
      =xgSN
      -----END PGP MESSAGE-----
secrets:
  something: something
  super:
    secret: blah
some:
  other:
    things:
    - thing one
    - thing two
#!yaml|gpg

blah: |
  -----BEGIN PGP MESSAGE-----

  wcFMA/18BRYacDTHARAAbdbouBRmDqCFlG0Os6guN1eHd3TU+fsdT6xd8DyZJazi
  J93dIZFRTsNMBF1laQIgpCZaej6Q08F6+4gyKVFxMctW8oHYxnviACzhQzYocO3N
  YowpAIWdiz9l+L6fx/Bc66I9T7cDAPlOJuyK6bQx1j7Cpho2WxWOlsf724Dcluf+
  CupvWoROh/ydbMDQGCb06txRoaOnWnhKEFRTzOOLsSv0EHUfElBMNXB2+Xy/EWoQ
  yLeYYOW7QKVJsiacHwucaQ8mqAo9NPYwlgkgBn7tyxIarxEmajNxPsUYcMFyphUS
  1uNryuKJ6j/sz8vsBq3UpiEWX4a/sLKDmeQfbpg4gsXi+BGMo+qibnxlDUfj5Mkg
  tRgd3In41ZfIRGyuppB4wfoOReerR6tRB2X4RYZYNARAWaqU5hCKRpHi4eaq/Uu5
  Q4W3N6nery1hA6mt48ePgYmTzfUdII377/yIn1KBtwZmHjnlKldbFGnQtQCObkPK
  V1I8LzgWVP/Xg2oC+rK90jboTLxACeEVKqVIdu3/S9mrwBWDs2djJuHysAkuBsdt
  w1dx/JFC+mEcNxIBYn1RUjqGToZjGXqJu5TGzBOyUm78gLSj6q8vEOloiEyf8HzR
  q1W9rcYuv7aCO0NMed77wMi+OUsuhUtUCB2YK6fEksCGIWoF2DD5JZpCS8IEesrS
  4AHkF/uWRuwRLPiouXd7r8DRAeECoOAl4J/h49/gHeL0azgi4H3iE3mEMuAm4Cng
  hOST4CH30DNbbOSXs4+mmRwF4tqBhWnhkPgA
  =FdNi
  -----END PGP MESSAGE-----
foo:
  bar:
    baz: |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAAJFAaGPYM1Lt9SghBPn4AD06vWxQax7K5zLEHC+kdq6IA
      4g4QZZvf+HkQhJ3lWc/NSATnQFV+ZPrQKiVcBTxFU8yx3GEuwUf3fLfVPXmbltOu
      NBJJEheFpSGap2zTSXUCqWnDScSznAc6h49L2VBSpkzaVN33K/87FiVjXBtxeDrm
      iH2bBTWFyJkpnXbVfm8Gcua649bC65SZTJ7INsRRN2Chn5ck/8/FSQ5KLBO+7IlQ
      uJgwIqoDXcZMZqIooyRbwq68j9xsm6701hUgvjD37RNOVY5XeECHCcLXUmGX5/Nh
      F/lQJuDFFoxUt4zT+DJx/DWHm+RGe8X8SdcEcraGZThzn5YdSkIEHu6+f/ZFIMiD
      bZgRnNpcSVbUoImYClSqzd6VkzycX/CKPyu9L/y+l042LVglvCGXgJara1BaQR9G
      UwUVbypZ+te+caOSKXJUCJNNjxsfUHrfpMEwJKOf7swkTUiLoF8s/YTDd4q1hu6r
      qk2e94qii4QV584cSO/aP3AnTG39fuRC+u/e56mOuBR3kTq9vGAZDK95y3bedx1T
      xRIPGdtlnLrLiWpcr3JPHt8CUuWT1ZfbB9kzkgSbPEySak4GI4eAZ6iMVwL1KbgP
      B2DM89TKNUQzrv2qhc9wtf0LVLHjs599eAGLbOnsDgD/AO7LalknkVDb7ftVQwTS
      4AHkpf/d2jzHTtA8OPFB3PzRkOFJUuBI4BbhaKngPuKcsfba4ADiBQQemuAX5Nxo
      E0YDaR9bn/qOGFwWfFfi6WKLaOEWYQA=
      =e1/x
      -----END PGP MESSAGE-----

$ cat foo.sls bar.sls | generate-secure-pillar decrypt all
#!yaml|gpg

blah: floob
foo:
  bar:
    baz: blah
secrets:
  something: something
  super:
    secret: blah
some:
  other:
    things:
    - thing one
    - thing two

use stdin to decrypt two files and re-encrypt as one file

$ cat foo.sls bar.sls | generate-secure-pillar decrypt all | generate-secure-pillar encrypt all                                                     07:23:16
#!yaml|gpg

blah: |
  -----BEGIN PGP MESSAGE-----

  wcFMA/18BRYacDTHARAApB3WsuWV5PXZpraajLfcDlDHus6EDThDM8XTiqL0Us59
  URN0kbGs8dSVSc4V2PgYJx/A/FXHv5te2Klmj/lHngsW/59QWJQmAeEslxOgHwyO
  9wTxXj4iTVcU8wKIVMpm1UT41NTo7XsQ5YHPDlRPMp2GtqSn44NfqWBUw3Oc5XHX
  ywgJLnnhqzwQZ3bFZunluEWtXTk+09ZywLsL+6FJGReqUSD5IMkP1WrQDJR4elf0
  zmKZBXBPN1+zgkwbxIvrFoqJvJTfLcKaTNDjhT7GmTM2YfJNr8n2wDYHEvpy55Bp
  IFwy65O+jWltQ77w9c6/zMgd91c4RPBd/l1qNynmz/AfDMfqNHhe/I4cYY0+5F0m
  b3HiXmHkuTdZP/uvGMAsKca9tRTWawda7d/ygroiRsBKL3fBBoJYs1gmXjOCDu24
  CFGWeyplM21bfQc6MHjISr6geBTHDYsqlfktepUnntVo8AzZg/Ma4auD1lfKIyvy
  ql/PmnApdALc8tfiP5KPSv4H9DkusZfdoy5Q93aovr1XeY1Js+c65HjLyKJSE3qX
  Yp/vErKtytetLwu0Nf8uO2l442+pXY+Y8rjArk89qtoCfRuJfFqL9iy71+8biGOY
  qA0jq334agSoPn2FiavzIuhw2FQZpXNNdYBm8qg8O9mOfoJAC5Iu0LXzb6pD/1HS
  4AHkCP+wX2MtrftCp7X/pMfFK+HE6eDt4BvhfGXg3uJKgPpT4Obi0U98KeCp4K3g
  QOQYVh2HCgD4SIQMg1yc6dft4jIbeI/h/yIA
  =MDIs
  -----END PGP MESSAGE-----
foo:
  bar:
    baz: |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAABPOatlDbxrz2ZH//SvceDO3rQgZ7Q+1sIb07wWOQJFFA
      d6jChMy+2vvFm/pAl13iESvjsFlJwdA7UMWh1SCvkc558M32rMYdupKHuSKZeUqd
      5oHT+613EW5dc8QZW7ZOAjsqPR2nsayIcO4r5xZkgKrgraGeLrhl7u729FtgJfWB
      2btCdvID68bccKsQBpAizF9cLFE9106RK4DqCqFJaE9McrggJ7QGdkIxLmle/mnI
      rMDqQ2bCtgkxSlmD1ed6AOioeOkF8EXCIABm6+h89eMSENUtagkhhO9SoKFaWpjb
      FnbZzUOAaxpN52iG0JZTzONd52DXeYu58NLDaSRXcziCRiOzzeNpNwtbIb64p4QU
      p6+dQVOUXsFgcl8FEs17Mi63XDr2D5C6CzNpEY2CEEED+v13oU9TuLp+zuSmrcR3
      TbpkqHNvHzlqwtjm6BaP0qtMNdRiHNNt1+PwE3O2sxE3rkvdRjwhgUTO70b00pQU
      H2+9dG/Ez+DjU3QWKcVhEhzda1X1kaETlIBMhO1sWhP+nth8DRe7n4ctbpFEI+sT
      JEk5qHdOaQxzMqZ/pqezt1riSA01AWuYLolXCxUJ7kkfVEfK3xIDXsfkxnyMxEtL
      CNQ/0cYB50VJafJpcNlX+3jOQrLhCmhu7PSZ8CecKvJIx/Xjp+HchYEzZwuwnvPS
      4AHk0D3ii2AaD2wXuiVlVAXZAOEkh+Ac4I7hBs/gueIYJ/Wc4HHi+CIWkuCa5IN/
      foUSs1nH9eXxGng1iTzinwiGk+G2VgA=
      =L3Rw
      -----END PGP MESSAGE-----
secrets:
  something: |
    -----BEGIN PGP MESSAGE-----

    wcFMA/18BRYacDTHARAAacc6X0t8RUCBNL61d0V5wbSa4VZuURLsC+e6o2GII3Mx
    vW4xd34QWyw9bkSgc3jndtXzdKcAzWwa9KTRqoNfIINH45a+bpoD0lL7WHGhwd+I
    tUDtq4QHby7BTRvlWc0f2/LhTGIzojjxp29l7eLDxF9NRnqHOVKlRxAE4FvLwjB5
    42ddEJeWAwbOzFpqXzu2LF18miqlINipPxXIhF2t7+0pGzMpPf9xho7hOkiBdmLP
    h+LLHDFCRuigWsh7XRp+wV7lT/Am1Srne0TgdVTPPLG2tpkqmnB/MHCiYJU18FFv
    o4uV5z7f50CQ1msP0G0z4WtZ8knulGnfHItZ5+7Kj9Y91r7wU6TuXz49bSil4M93
    Bx03YPK2iHT7h6LZnx1v2Gq3NIQTNvefA0tYJprFObevesZHiwfrJoRe87a4TmpE
    6dkMeUbzUepkrYNqudeqcRi0hgZ88mbR0QwBd6lwi0UdaMQS2ZJb7yjNlizfUdcW
    F2FsmTRUhTfFNMHbF6QlT+n3kPd+HOqW8dZtz7H1lxeAdpKnyTy3TqS09xL3UvX5
    bJsR58ULkC3mXe2xkbXZThpeKmLhnPpwBvYcO5x/3X2E1CFye38w5+efOxNfSKbn
    3YeP1nzBg9rKxim7vTWykNOWjdao8t/d7bmox3c7VkOJeJVy/BmlwimgecmAFuTS
    4AHkR0o/dXu0Ti9JafPdPha+IOE8b+Bm4CfheuLgyOIaCyNJ4FfjeCqIWxRklaPg
    m+Bj4Mrka+qvv+2PQor/GduYxt1HK+LPfUDT4bWrAA==
    =54KJ
    -----END PGP MESSAGE-----
  super:
    secret: |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAAavT2UiZPbB0rG47TdqGC4rnmwngq0S76yXT/HbpHeuYY
      bvhJ4ooHtwIjRL1PM7kdHDGSiP1cLRYySlJxHBv5DSDP+ySwjTS7m9nwkox8QsQ9
      mnrB879jQjuQ9kijPoPrIqwB3zfoc9PlPag/lXaEidyXHfpJnIHO7A6CYDnCGpFt
      Poog+2T16bhaBbOqCsp6XoFTasALcX9YnGteik++aXUpRhaB73MJ5eoEbYc8Ku8L
      HVk8PW5jbUVwCSjFI2Iez4/If75lwC+3FC/mMs5BtyDK6n1YVC+znmcsRhjVDQMu
      EfWeV9K3H8Q/zRHaxUJgCqAWt43MqfiBd1ngruy04yyEXTG0OlZ+BppDQKkTFrvD
      S/35IXoMw7ZOQ2CB6wLkAO5LCCvyK88EKTkvdTIEsClYiYaoZUjm7f7/s29gTUkx
      EKCP5h/57pciYUAs5EAeSYGqz+oSoCu7mwcKsWFTYSUzp2VfWbp+IyLT6c9m1xdy
      F2uyMHxvdRn6+f7r/his9S1kF6u2Q065NlvooYXTyBTOb29tI7/pj63Jvv1v8WcH
      0chy14zs4C9kv4QNrAcfdO3EWE5XtMLoyzMRm3fV2yTt2yd+a35Uf4ZOMp7rwxBu
      ZLMLTdTFR8M7Sx0o0ai/nS4W7dnOzYMiEBKA5QIiQWaPmcHIzlogZntdDxLpIRDS
      4AHkk4Q+r/B2RbAH/aEOzAm1r+GR8uDb4PjhT7bgweJAHaao4IbiY/KA8eC45Dtx
      EhSMf5DMPJ5UTPAhhJPipWoXf+EX6wA=
      =ng/U
      -----END PGP MESSAGE-----
some:
  other:
    things:
    - |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAALeu8yNCuICQDG99tmq7/yunt3hIwFu58BNjKU1298wCE
      A3OQhxVTIoVw6h03aGSooaQ2SwckTFFTqIvgzL8WfrIpuDScG6D0zoxotE5a3VLo
      fMpt3IZaKXv9FcUI2EjD+XfguwfGS1DN4hvELNrdB/lIgMx4mDayrUMpuKIgDo8t
      u1rSJujAQN6Bsp9/tltCfSlbWMHwUgaWGPkydlOSQrFX4UEMpIBFH2LZ6UywGypB
      Ffy6HlElRPELYB7yZ6zGQ0mtBZZPwHMb3fONJ6oaiEayL9emnOIFOtq7luVeGcnn
      tseg/XwOUKA8fnSljmqQcMCLw4sBsvOkTJ6l3Jw2WjOGeJxj6366HF3Q7gWT/ZSt
      UB+s8XMLjCzOLwzcDUxp7Lrmfi+gob09jtqsnefXr+56ZMBDpK9M7PFKENojA1rh
      lK0xSbsyQySJgRJbNhR4rXdvTFcQA8gg/50y4pyzRTRmwjy/DKwAPl3AeTWg5a7L
      6iO6BywqtcSFuLKekGCOMeKn0Qtt7Y5iODbq4CsMN+iquIBJvVZ9JYa7iqkded34
      /FmGEIYjZ5zM9Z8kUiQIbOeFTKwmkFtwjfpEGxVdrqqUgnv5OJoPsbebewablPzd
      GYrmjYdbiR7gywnFKJ7G9DB7S7bq0jqbguWH1CtQNKOcY+7aCfPxO05qUPc2X1zS
      4AHkZcD9q7J7hmbr28UMUv/iMeFV9eDa4KThE/zg9eIEitKJ4IjjYl9uCQGFp6bg
      CeBd4E3kcC7ctcXRhWmh/ferV//Wb+K0uo9+4RLnAA==
      =RNtS
      -----END PGP MESSAGE-----
    - |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAAitJlxsk1DFbZ/kbs+Rqoui0q/uZWP+Xgf2msJn0BNZ2H
      5Ea2pZ7ib7fFEuhaZRFYs/nJD86XJX2PovfNynVUTWypkWJWtK9Ng4le8EVknUsL
      b+KQJtoVD6wSMCSgZE+C/HDM+SE37GU1K1xaD8YXlyoLLE2ZgbS9l6jhEGMBEjdK
      0+IQSlBM58WSlRP/SaL5FxcSl4Rz8KVeCBRBYUkksH19U6KhgezK6TNgON5AeV11
      oPhQRLQlq0/JoHCRGEqwhIbeViqO9dzmxdDphFQ0g/zswwVq82aOfIdKwTfHP3tN
      2mzAOvzFeGcU5qyuZB259RqZ7Mr03JHUwBTxSkm2J6myyuvwknpfvFOh5sy8d4op
      9mv7M8mrfP/ryMCJ3BtChDmTGIw/8fG2V6vop9r0kuiiW2gTVAoWaUCcdsMq0i8D
      BTYLnUjmdFpBCCmg/17EyNTgfJVfk0TZlTQCCksUsUWTlMWOAOO1b/cyA4hi51m4
      WZJpmkcnv8qlVsyy0rfB6Fyokhnco88RidXZBe3EcqcjOxcMg7cJllJX9esBFcH/
      YgAYcTLNxuVnif5U7GYrq9lmRV+FFhLciJG1gYzyhP70AiEXgh2r/0gH0gPXyh5e
      F8gPsQ22AAJW3Xgw3/9jiz5JBw2KFAmrI69B4WHCWG6IOe8tWeAmH4bxCDG5xJ7S
      4AHkzmBuZrhLFgQnAWXNbmqdyuHijuCP4FHhRQrgM+Jb61Ik4Dzjod08EmG9Si/g
      wuDB4DvkMwov5SzPK2bJ1rGWXrGkXuLiy2PI4VRgAA==
      =fZdQ
      -----END PGP MESSAGE-----

need to check if a file is using more than one PGP key?

$ generate-secure-pillar keys count -f foo.sls
$ echo $?
3
$ generate-secure-pillar keys count -v -f foo.sls
3 keys found:
  A5D6DA2F1295A49D: Prod Salt Master (Production Salt Master) <nobody@everbridge.com>
  FD7C05161A7034C7: Salt Master
  F7ADB3764640649A: qa salt master

multi-line secrets

$ cat foo.sls
super:
  secret:
    password: |
      line one
      line 2
      line 3
$ generate-secure-pillar encrypt all -f foo.sls
#!yaml|gpg

super:
  secret:
    password: |
      -----BEGIN PGP MESSAGE-----

      wcFMA/18BRYacDTHARAAYBWJ5sX6R1hpO7iXtwfYfT8ohJgLOZEd9U2Ta/LEh9cC
      BpOxQaVgRc8+8hrnZ8mC+x4vIRuoDbn6l9AXdo/QDjfQv5np3UsS1cbfYMuWMTTv
      FMIvq/OW4/MVevmbbG3K9w/Uz02+Bl5DQOvTp5czGL26utDigp6mWLozDg2l8jYi
      3Ae7x+HAbyuuOMNQpT/vlNY5m5kojGC22gOOeOELkZDsQwFM5dnbEXUOgQrGr25F
      RS/GkHzJa7Rx/g00jQfinGND8fB1dLiqkfU2Q9LkYY0hVR5N751NTmWF6XlvaAxe
      iojTkg8aBFv+hmNCijwQKIIJvoyT7n97riVymy0axap5sa5UC4gnBtFRdbdRr68o
      rXTh0HnGxRIeFtBifaMeKudNKgxXX96T6hEOlJsU2VWao8EBb69SDzTEJjermZir
      LylVvAlYnYKAu6xh+C81MdRGenHCo8wlCma+eCGUXbMKO24HhR+rm2q2hRui9Ln1
      Za96K5CtF/nqVsbvTE2eNbGqt3HH1KE14tHlAM4mvD1EqAHgnaHE+YJGb//aEVN7
      xklbQOxXLUSbtvPCRix9NLZMO1WvfkwSqWEAjMNqyL0gprwSSrGrGztIeJOorRcx
      2Sv61Lfs3duI/AtJoAkCvslmOWvMuw3WJRRZTR4vuufaNsXu4bxbjHKOiYUtK7fS
      4AHkB1WI/nA5aqFhPXqYUNUokOETheAY4NvhroHg2eL4AmsH4F7kpspB0/2o+Nko
      4c20HRjHQODe4i26ShrgpeF8SuAT4MPgZ+QRWY8FCM1/wzhslZhr6R9U4vHCBVvh
      piAA
      =6RY3
      -----END PGP MESSAGE-----

rotate the key under a specific top level element

$ generate-secure-pillar keys all -f foo.sls
bar: |
    A5D6DA2F1295A49D: Prod Salt Master (Production Salt Master) <nobody@everbridge.com>
baz:
    bar: |
        F7ADB3764640649A: qa salt master
blah: |
    FD7C05161A7034C7: Salt Master
foo: |
    F7ADB3764640649A: qa salt master

$ generate-secure-pillar --profile prod --element 'baz' rotate -f foo.sls | ./generate-secure-pillar keys all
bar: |
    A5D6DA2F1295A49D: Prod Salt Master (Production Salt Master) <nobody@everbridge.com>
baz:
    bar: |
        A5D6DA2F1295A49D: Prod Salt Master (Production Salt Master) <nobody@everbridge.com>
blah: |
    FD7C05161A7034C7: Salt Master
foo: |
    F7ADB3764640649A: qa salt master
Clone this wiki locally