Need ability to not automatically configure jdbc. about sonarqube HOT 4 CLOSED

Would it make sense to add an LWRP to set the JDBC params?

What I usually do is set passwords in encrypted data bags and then override the node attributes in a parent cookbook. I'm guessing that this still exposes them through node searches though? Adding an LWRP would allow the same kind of approach without setting node attributes (only LWRP attributes).

I must admit I haven't used node searches much but wouldn't LWRP attributes also be searchable? In which case neither of our approaches is good as you will still use a resource in another recipe to generate the config.

from sonarqube.

So now I am confused. Admittedly I am a bit unclear as to the difference between an LWRP and a regular resource, but the cookbook has a JDBC resource already so I don't follow what a new JDBC resource would do distinct from the existing one. To my mind, all that is needed is to not invoke the current resource as part of the default recipe but invoke it in a separate optional recipe and we're done. This way no one needs to set or use the node attributes. They can still use the resource by directly providing values from a data_bag or chef vault or from wherever. All the existing tests and such would need to be updated to run both the default recipe and the new one, but otherwise I think it would be good to go. If you would like I can submit a PR for this (though it may be a week or so for me to get to it) to demonstrate my thinking.

from sonarqube.

ok i missed that - you're right, i already created an LWRP. Also I just had a look around and I don't think resource attributes are exposed like node attributes so this would work. I think you're right I shouldn't be putting sensitive data in node attributes. This is what encrypted data bags (or Chef Vault) are for. I think you're right about the solution. By the way I also do the same in the sonarqube-mysql cookbook default recipe which I now think should also be converted to an LWRP to avoid the use of node attributes

from sonarqube.

Closing due to inactivity.

from sonarqube.