carvel-dev / carvel-dev/kapp-controller
Curve25519 cryptography not supported in gpg decrypt
- Dominant language
- Go
- Stars
- 323
- Forks
- 127
- Avg merge
- 2d 16h
- Merged PRs (30d)
- 4
Description
**What steps did you take:**
[A clear and concise description steps that can be used to reproduce the problem.]
Followed instructions as per https://carvel.dev/kapp-controller/docs/v0.32.0/sops/ , however, since my local gpg version is 2.3.8 (in Fedora 37 and homebrew), this defaulted to Curve25519 keys.
**What happened:**
[A small description of the issue]
Once in the cluster, sops templating fails with:
```
'Building config: Generating secring.gpg: Reading private
keys: openpgp: unsupported feature: public key type: 22'
```
**What did you expect:**
[A description of what was expected]
Decryption to succeed
**Anything else you would like to add:**
[Additional information that will assist in solving the issue.]
https://github.com/golang/go/issues/44226 shows that the opengpg package has now been frozen, so this is unlikely to be ever implemented (and I more or less agree with their concerns), so maybe it's better to steer people towards age by default.
Another issue that I found was that I initially had listed the template options with
```
- ytt: {}
- sops: ...
```
and this failed with
```
usefulErrorMessage: Templating data is not supported
```
and only found to place sops first by following the function references in VSCode. A more user-facing error message may be helpful here.
**Environment:**
- kapp Controller version (execute `kubectl get deployment -n kapp-controller kapp-controller -o yaml` and the annotation is `kbld.k14s.io/images`):
- Kubernetes version (use `kubectl version`)
---
Vote on this request
This is an invitation to the community to vote on issues, to help us prioritize our backlog. Use the "smiley face" up to the right of this comment to vote.
👍 "I would like to see this addressed as soon as possible"
👎 "There are other more important things to focus on right now"
We are also happy to receive and review Pull Requests if you want to help working on this issue.
Contributor guide
Assessment
This issue has not been assessed yet.