Support for sops decryption methods other than GPG?

[brokenjacobs]

Is there a plan to support other decryption methods besides GPG? Specifically KMS solutions from the various cloud vendors.

[stefanprodan]

The gpg secret is not required, if you bind an IAM role to the default service account where you installed the toolkit then it should work, I mentioned the KMS solutions here https://toolkit.fluxcd.io/guides/mozilla-sops/#configure-secrets-decryption

[brokenjacobs]

I thought that support was missing from the merged sops code when I looked at the kustomize-controller source code.

[brokenjacobs]

I'm trying to use aws kms with an on premises cluster as well so I don't think I can bind the service account to a role like that, may have to use env vars.