Creating users from data bags
When managing a set of servers, it's important to make sure that the right people (and only they) have access. You definitely don't want a shared account whose password is known by everyone. You don't want to hardcode any users into your recipes either, because you want to separate logic and data.
Chef helps you to manage users on your nodes using data bags for your users and let a recipe create and remove the users, accordingly.
Let's take a look at how you can do that.
Make sure the you have a cookbook named
my_cookbook and that the
run_list of your node includes
my_cookbook, as described in the Creating and using cookbooks section in Chapter 1, Chef Infrastructure.
Berksfile in your Chef repository ...