I'm commonly using hiera-eyaml-gpg inside hiera in puppet and came across quite interesting problem. ASSUMPTIONS Lets assume we have everyting ready to do the encryption around secrets in YAML: hiera-eyaml-gpg installed either gpgme or ruby_gpg gems installed ruby-dev package installed gpg agent working