Alan Raison

Hi there @detro. Unfortunately the ssh-format hash is not the same as used by kubernetes to calculate the Key Id during OIDC authentication. I am trying to use a tls_private_key...

Unfortunately, although Lambdas can be packaged as container images, there’s an API that must be called to fetch the triggering event and report status when it finishes. Therefore you couldn’t...

It seems that adding `--mode=pinned` to the `cdkdx upgrade-cdk` command would achieve this next time.

Lolz I've just seen that you're the cdkdx maintainer so you will know this! Sorry!

It's just that whenever there's a new cdk version, this strategy *forces* us to update it straight away. I don't think this makes sense, especially as you are publishing updates...

I realise that ExternalSecrets are already an abstraction over where secrets are stored, but it seems that the SecretStore is an obvious location to add this extra functionality, especially since...