Chris Jones

@juan131 We're no longer using sealed secrets. But 7 months ago when I wrote this ticket, we were using `quay.io/bitnami/sealed-secrets-controller:v0.16.0`.

I can reproduce this problem -- or at least the symptoms. I have a single-node Kubernetes cluster in which the node can't reach its MetalLB IPs if IPv6 is enabled....

I think this was caused because the user that owned `WORKFLOW_PAT` had `Read` access instead of `Write` access. It would be great if this action could provide better diagnostic output...

Mine was set to: - `Preferred audio language`: `Media default` - `Preferred subtitle language`: `Media language` I just changed both of them to en-US, and it fixed the subtitles but...

I think this is the same as anchore/grype#601.

Degit appears to fetch via https, so I tried this workaround: ``` git config --global credential.helper store echo https://foo:${PAT}@github.com > ~/.git-credentials npx ghat user/repo/file.yaml ``` (I also tried with `--mode=git`.)...

Not sure if this is useful, but it looks like degit has a fork that's more actively maintained: Rich-Harris/degit#258.

As an alternative, users could use kustomize's `helmCharts` support. However, kustomize doesn't support helm charts with the `oci://` scheme (kubernetes-sigs/kustomize#4381). If bank-vaults offered an https helm registry, that would work.

Kustomize now supports `helmCharts` with an `oci://` scheme. That support has been taken up by argo-cd, which meets all of my needs. It's possible that that's enough for the other...

This doesn't seem to cover the Jiva replica pods, which are created in the application's namespace rather than the openebs namespace. The ClusterRoleBinding above only allows pods in openebs to...