How to manage production configuration?

[wbingli]

Sorry to post here, this is not an issue but a question. I cannot leave a comment in your post : http://misheska.com/blog/2013/06/23/getting-started-writing-chef-cookbooks-the-berkshelf-way-part2/

Firstly, thanks for your great guide of Chef and Berkshelf. It's fantastic!

Only question for me is how you will manage the configuration for production server. e.g. how to configure the 'server_root_password' for production?

Do you need other chef-repo to manage data_bags, roles, environments etc. if we use hosted-chef or private chef server to manage servers?

If such repository is required, how to use Berkshelf and vagrant to test? I think Berkshelf plugin is not designed for this scenario.

Cheers

[misheska]

I don't have a concrete example yet, but a production-worthy approach would be to use chef-vault to manage your secrets, per Seth Vargo at Chef.

[misheska]

For a concrete example, this blog series on "Building Security with Chef" seems helpful:
http://www.markerbench.com/blog/archives/

[wbingli]

Thanks,Mischa

Other question is about how to manage data_bags, roles, environments in Chef. So normally will you create other chef repository for them?