ansible-vault is great for this. Obviously it doesn't help puppet users. The one thing I like about it is that its bundled with ansible, so you don't have to r

ansible-vault is great for this. Obviously it doesn't help puppet users. The one thing I like about it is that its bundled with ansible, so you don't have to rely on version-control specific tools (eg. git-crypt) or third-party tools (Hashicorp Vault). Yes I appreciate Vault has many more features but if you just need to encrypt a handful of secrets and you're already using ansible its a no brainer.