Encrypted Data Bags

default.rb

search( :users, "*:*" ).each do | user_account |

  user_id = user_account['id']
  user_data = Chef::EncryptedDataBagItem.load("users", user_id)

  user user_data['id'] do
    comment user_data['comment']
    uid     user_data['uid']
    gid     user_data['gid']
    home    user_data['home']
    shell   user_data['shell']
  end
end

include_recipe  "users::groups"