Jonathan Ballet

Results 89 comments of Jonathan Ballet

If this feature is willing to be accepted, I'd be glad to propose a pull request to support that use case :+1:

@amol- Basically, yes the purpose is to have different applications using Beaker and the same namespaces/keys without conflicting with each other. We also have a "monitoring" aspects, in the sense...

Any interest in that functionality?

I quickly checked this morning, and it seems to be coming from around ~1f992b3f8704a210b003e374b7a2643b45caf386 or 82710a7ac167b745fa56667ca6848832c00ff4a1 (1f992b3f8704a210b003e374b7a2643b45caf386 doesn't build here).~ #1555 and/or #1560 when the provider's initialization code was refactored....

For now, it seems it can be fixed by explicitly configuring the `user:email` scope with either: * the configuration flag `--scope="user:email"` * the environment variable `OAUTH2_PROXY_SCOPE="user:email"` * or the configuration...

> though it's good practice to set them explicitly anyway so bugs like this don't break your config It would be great to document the right settings somewhere then, I...

For 1., this is never going to work: the sops provider (actually sops itself) doesn't know anything about the AWS provider and the settings you configure in the AWS provider...

@enchorb The [provider v0.7.1](https://github.com/carlpett/terraform-provider-sops/releases/tag/v0.7.1) contains an updated version of sops that supports credentials returned by the workload identity federation on GCP, would it be possible to try again and see...

> unknown credential type: "external_account" Hm, can you double check you are using the right version of the provider? This particular error should have been fixed by sops itself, and...

> ``` > Group 0: FAILED > projects/project_name/locations/us-central1/keyRings/env-key-ring/cryptoKeys/env-crypto-key: FAILED > - | Error decrypting key: googleapi: Error 403: Permission > | 'cloudkms.cryptoKeyVersions.useToDecrypt' denied on resource > | 'projects/project_name/locations/us-central1/keyRings/env-key-ring/cryptoKeys/env-crypto-key' > |...