yep :)
$ eyaml --help
Hiera-eyaml is a backend for Hiera which provides OpenSSL encryption/decryption for Hiera properties
Usage:
eyaml [options]
eyaml -i file.eyaml # edit a file
eyaml -e -s some-string # encrypt a string
eyaml -e -p # encrypt a password
eyaml -e -f file.txt # encrypt a file
cat file.txt | eyaml -e # encrypt a file on a pipe
Options:
--createkeys, -c: Create public and private keys for use encrypting properties
--decrypt, -d: Decrypt something
--encrypt, -e: Encrypt something
--edit, -i <s>: Decrypt, Edit, and Reencrypt
--eyaml, -y <s>: Source input is an eyaml file
--password, -p: Source input is a password entered on the terminal
--string, -s <s>: Source input is a string provided as an argument
--file, -f <s>: Source input is a file
--stdin: Source input is taken from stdin
--encrypt-method, -n <s>: Override default encryption and decryption method (default is PKCS7) (default: pkcs7)
--output, -o <s>: Output format of final result (examples, block, string) (default: examples)
--label, -l <s>: Apply a label to the encrypted result
--debug: Be more verbose
--quiet: Be less verbose
--pkcs7-public-key, -k <s>: Public key directory (default: ./keys/public_key.pkcs7.pem)
--pkcs7-private-key, -r <s>: Private key directory (default: ./keys/private_key.pkcs7.pem)
--version, -v: Print version and exit
--help, -h: Show this message