When running "knife openstack server create", the --secret-file file passed is not generating a file in /etc/chef/encrypted_data_bag_secret Current workaround is to follow up with a "knife bootstrap" which does honor the --secret-file flag.