I know this was possible, but just can’t recall the easy way to do it. I am trying to get the encrypted databag secrets uploaded to the nodes while bootstrapping or before bootstrapping at ‘/etc/chef/encrypted_data_bag_secret’.
For the time being i am using something like:
knife bootstrap ec2-server -E dev -r chef-client::service,my-cookbook -x centos -N ec2-server --sudo