Hey! A friend wanted to add encrypted sudo-password in his inventory file and finding how to store this in the doc is not straightforward: https://www.puppet.com/docs/bolt/latest/privilege_escalation#configuration-file-options tell to use

sudo-password

but does not indicate what structure must be used, and we had a hard time finding sudo configuration was under config/ssh.

---
targets:
  - name: example
    uri: <http://example.com|example.com>
    config:
      ssh:
        sudo-password:
          _plugin: pkcs7
          encrypted_value: xxx

We where surprised the page "Configuring Bolt" linked for more info contain no info related to sudo…