Wipe password attributes before report to chef server

Password attribute reset.rb

chef_gem 'chef-vault'

require 'chef-vault'

secrets = ChefVault::Item.load('secrets', 'my_app')
node.override['my_app']['password'] = secrets['password']

###################
## Do your thang ##
###################

ruby_block 'wipe password' do
  block do
    node.force_override['my_app']['password'] = 'redacted'
  end
  action :create
end