Puppet Managing confidential information in Puppet

Question

How does puppet manage confidential information like passwords and how does it securely transmit to other nodes?

Answer 1

Using Hiera for external data lookups and encrypting that data via eyaml or GPG is a good start.

https://docs.puppet.com/hiera/

https://puppet.com/blog/encrypt-your-data-using-hiera-eyaml

http://leebriggs.co.uk/blog/2016/11/15/using-hiera-eyaml-gpg.html