Cool New Packer Features
summary
Shows how Packer now reads variables directly from console KV and from Vault KV v2, demoing a service version pulled from Consul and a secret value printing as "world" from Vault; adds a vault AWS engine that asks Vault for one-time IAM creds (demo creates creds but observes ~15s eventual-consistency delay from AWS). Introduces sensitive variables that redact secrets from verbose logs, a breakpoint debug provisioner, refactored shell-local for Windows and env formats, generated-files for file provisioner, and a new vagrant builder that produces a .box (packaged successfully).
AI-written summary · about
chapters (13)
- 0:00Introduction and overview
- 1:50New template engines for variables
- 4:39Console KV store integration demo
- 5:22Vault integration for secrets
- 7:30Vault demo with Packer
- 8:55Vault AWS engine for IAM credentials
- 11:44Sensitive variables to prevent leaks
- 14:54Debug provisioner for build pauses
- 17:04Shell local provisioner improvements
- 21:00Generated files for file provisioner
- 23:07Vagrant builder introduction
- 24:57Vagrant builder demo
- 27:48Q&A and closing remarks
related talks
40mHashiConf Day 1 Opening Keynote
24mSecrets at Scale with Vault and Waypoint
38mKeeping Secrets - A Practical Approach to Managing Credentials
14mThe HashiStack from the Perspective of a Web Dev
25mCan you keep a secret?
23mHashiCorp Vault and Getting Day 2 Operations Right
33mPacker: A Swiss Army Knife for Architectural Enablement
51mIntroduction to Vault