Jack

@alemorcuq rebased it as requested

when is this being merged? Solved a merge conflict already and now have another @alemorcuq

You most likely need to use: ```yaml # https://www.keycloak.org/server/caching # Required if the --cache-stack=kubernetes - name: JAVA_OPTS value: "-Djgroups.dns.query=keycloak-headless.keycloak" ``` Note: The `value` above is the headless k8s service address...

@akshaysgithub so once i had the IRSA annotation correct and was able to use the role (i sniped the pod to ensure it wasn't using a bad token or anything)....

Is this likely to be merged? As the lack of Kms encryption literally renders this library useless

Don't get me wrong, I've used this heavily in the past but for this use case I have to have encryption at rest. Ideally I'd go for Aws managed Kms...

@vide if you drop `.encode('utf-8')` from these lines: https://github.com/cevoaustralia/aws-google-auth/blob/d6dfdb6be873f507bf075699fcb868902635dc98/aws_google_auth/google.py#L100 and https://github.com/cevoaustralia/aws-google-auth/blob/d6dfdb6be873f507bf075699fcb868902635dc98/aws_google_auth/google.py#L122 Does the error persist?

wondering if using the `-l`/`--log` level would be better to reduce the number of flags the tool has? I tend to use `--log debug --save-failure-html` together when debugging. Wondering what...

this feels like a really old issue but potentially related to https://github.com/hashicorp/terraform-provider-azurerm/issues/652

@toolmantim @0x0I any chance on this getting looked at soon? (This is of significant interest to our Buildkite Infrastructure, as i'd like to move all agents into our Kube Cluster)