diff --git a/.gitignore b/.gitignore
index 91d12dbe5..67ae8a033 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,7 @@
 .rake_test_cache
-.chef/
+
+###
+# Ignore Chef key files and secrets
+###
+.chef/*.pem
+.chef/encrypted_data_bag_secret