attribs

default['zabbix']['user_databag']['enabled'] = false
default['zabbix']['user_databag']['name'] = 'credentials'
default['zabbix']['user_databag']['item'] = 'zabbix'
default['zabbix']['user_databag']['secret'] = '/etc/chef/secret'

recipe

if node['zabbix']['user_databag']['enabled']
  zabbix_secret = Chef::EncryptedDataBagItem.load_secret(
    node['zabbix']['user_databag']['secret']
  )
  zabbix_creds = Chef::EncryptedDataBagItem.load(
    node['zabbix']['user_databag']['name'],
    node['zabbix']['user_databag']['item'],
    zabbix_secret
  )
  username = zabbix_creds['username']
  password = zabbix_creds['password']
else
  username = node['zabbix']['username']
  password = node['zabbix']['password']
end