A gem and chef recipe that includes a helper method to make it easier to work with encrypted data in cookbooks.
Add this line to your cookbooks's Berksfile:
cookbook 'chef-conceal'
include_recipe 'chef-conceal::default'
decrypt(node[:my_app][:database][:password])