We used something similar for Puppet: https://github.com/TomPoulton/hiera-eyaml https://github.com/TomPoulton/hiera-eyaml Really neat thing was that you could

We used something similar for Puppet: https://github.com/TomPoulton/hiera-eyaml https://github.com/TomPoulton/hiera-eyaml Really neat thing was that you could inline encrypt just the secretes making the rest of the Puppet module viewable and comprehensible.