support sops non-pgp backends

carvel-dev / kapp-controller

Continuous delivery and package management for Kubernetes.

https://carvel.dev/kapp-controller

Apache License 2.0

268 stars 105 forks source link

support sops non-pgp backends #37

Open cppforlife opened 4 years ago

cppforlife commented 4 years ago

figure out how to best connect AWS/AKS/etc auth to App CR's service account so that each App CR does not get "global" KMS auth.

mtricht commented 3 years ago

Probably a good start would be to use the sops go package instead of executing the binary, much like how Flux's kustomize-controller does. However, it does have the limitation you speak of, that is has one "global" KMS auth.