Comments (4)
Would it make sense to add an LWRP to set the JDBC params?
What I usually do is set passwords in encrypted data bags and then override the node attributes in a parent cookbook. I'm guessing that this still exposes them through node searches though? Adding an LWRP would allow the same kind of approach without setting node attributes (only LWRP attributes).
I must admit I haven't used node searches much but wouldn't LWRP attributes also be searchable? In which case neither of our approaches is good as you will still use a resource in another recipe to generate the config.
from sonarqube.
So now I am confused. Admittedly I am a bit unclear as to the difference between an LWRP and a regular resource, but the cookbook has a JDBC resource already so I don't follow what a new JDBC resource would do distinct from the existing one. To my mind, all that is needed is to not invoke the current resource as part of the default recipe but invoke it in a separate optional recipe and we're done. This way no one needs to set or use the node attributes. They can still use the resource by directly providing values from a data_bag or chef vault or from wherever. All the existing tests and such would need to be updated to run both the default recipe and the new one, but otherwise I think it would be good to go. If you would like I can submit a PR for this (though it may be a week or so for me to get to it) to demonstrate my thinking.
from sonarqube.
ok i missed that - you're right, i already created an LWRP. Also I just had a look around and I don't think resource attributes are exposed like node attributes so this would work. I think you're right I shouldn't be putting sensitive data in node attributes. This is what encrypted data bags (or Chef Vault) are for. I think you're right about the solution. By the way I also do the same in the sonarqube-mysql
cookbook default recipe which I now think should also be converted to an LWRP to avoid the use of node attributes
from sonarqube.
Closing due to inactivity.
from sonarqube.
Related Issues (17)
- Unable to install Sonar plugin HOT 2
- Recipe fails compile phase on Ubuntu 14.04 (trusty) HOT 4
- Sonhrqube restarts with each Chef converge HOT 2
- SonarQube 5.6.1 LTS is available HOT 2
- Bug in Scanner recipe
- "BindException: Address already in use" on port 9000
- Allow running as a user other than root. HOT 2
- Current list of plugins? HOT 2
- Error downloading sonarqube-5.6.6.zip HOT 1
- Cannot download sonar-scanner, even with new binaries.sonarsource URL
- Is this repo still active? HOT 9
- Need a general configuration resource HOT 3
- Unable to connect to a different database by just overriding jdbc attributes.
- Ability to configure SonarQube plugins broken by 53a4c49 HOT 3
- Default mirror needs updating: codehaus.org is defunct. HOT 1
- A better way to implement derived attributes. HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sonarqube.