Zoltán Reegn

I've opened an issue about offloading crypto a while ago, KMS is definitely part of that: https://github.com/bitnami-labs/sealed-secrets/issues/779

@crstian19 I think the goal of this ticket is not to migrate to go-crypto, but to actually allow using KMS, Vault, or any other managed crypto service. Some of us...

I'm circling back to this topic as I could not deal with it after our previous discussions: > because this means other sidecars (possibly injected by mutating webhook) would also...

Yeah, I didn't get around to doing any code for this, my org hasn't adopted sealed-secrets yet... > GetPublicKey -> retrieve the current public key for kubeseal to do its...

Accidentally closed. :)

I have run into this problem as well. I've solved this with the following little shell function for zsh, if anyone might find it useful: ```sh source $(direnv hook zsh)...

One solution I've come up with that seems to work reliably: Whenever you need to use amd64 binaries, you set two env vars instead of one: ```sh export TFENV_ARCH=amd64 export...

AFAICT to get arm64 builds going, we'd first need to use a maintained osxcross docker image that is up-to date and can target arm64. This one seems to be maintained...

@koalaman Also confirmed, that binary is properly working on an M1 Macbook Pro, MacOS 14.3.1

> Hopefully this will improve in the future. The homebrew built binary is 66MB, so it's already better than the only widespread darwin aarm64 build I know of. Thanks for...