{"action":"created","issue":{"url":"https://api.github.com/repos/bitnami-labs/sealed-secrets/issues/113","repository_url":"https://api.github.com/repos/bitnami-labs/sealed-secrets","labels_url":"https://api.github.com/repos/bitnami-labs/sealed-secrets/issues/113/labels{/name}","comments_url":"https://api.github.com/repos/bitnami-labs/sealed-secrets/issues/113/comments","events_url":"https://api.github.com/repos/bitnami-labs/sealed-secrets/issues/113/events","html_url":"https://github.com/bitnami-labs/sealed-secrets/issues/113","id":356881644,"node_id":"MDU6SXNzdWUzNTY4ODE2NDQ=","number":113,"title":"\"crypto/rsa: decryption error\" when combining several SealedSecrets into one ?","user":{"login":"renaudguerin","id":1047312,"node_id":"MDQ6VXNlcjEwNDczMTI=","avatar_url":"https://avatars2.githubusercontent.com/u/1047312?v=4","gravatar_id":"","url":"https://api.github.com/users/renaudguerin","html_url":"https://github.com/renaudguerin","followers_url":"https://api.github.com/users/renaudguerin/followers","following_url":"https://api.github.com/users/renaudguerin/following{/other_user}","gists_url":"https://api.github.com/users/renaudguerin/gists{/gist_id}","starred_url":"https://api.github.com/users/renaudguerin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/renaudguerin/subscriptions","organizations_url":"https://api.github.com/users/renaudguerin/orgs","repos_url":"https://api.github.com/users/renaudguerin/repos","events_url":"https://api.github.com/users/renaudguerin/events{/privacy}","received_events_url":"https://api.github.com/users/renaudguerin/received_events","type":"User","site_admin":false},"labels":[{"id":615088325,"node_id":"MDU6TGFiZWw2MTUwODgzMjU=","url":"https://api.github.com/repos/bitnami-labs/sealed-secrets/labels/question","name":"question","color":"cc317c","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-09-04T16:14:05Z","updated_at":"2018-09-14T00:49:33Z","closed_at":null,"author_association":"NONE","body":"I'd like to combine several (sealed) secrets into one.\r\n\r\nSince the values are now encrypted individually, I naively thought that all it would take would be to copy/paste the key/encrypted value pairs in the existing SealedSecrets' `encryptedData` and make a new one from that ? It doesn't seem to work :\r\n\r\n```2018/09/04 16:00:22 Updating test/external-services-credentials\r\n2018/09/04 16:00:22 Error updating test/external-services-credentials, will retry: crypto/rsa: decryption error\r\n2018/09/04 16:00:22 Updating test/external-services-credentials\r\n2018/09/04 16:00:22 Error updating test/external-services-credentials, will retry: crypto/rsa: decryption error\r\n2018/09/04 16:00:22 Updating test/external-services-credentials\r\n2018/09/04 16:00:22 Error updating test/external-services-credentials, will retry: crypto/rsa: decryption error\r\n2018/09/04 16:00:22 Updating test/external-services-credentials\r\n2018/09/04 16:00:22 Error updating test/external-services-credentials, will retry: crypto/rsa: decryption error\r\n2018/09/04 16:00:22 Updating test/external-services-credentials\r\n2018/09/04 16:00:22 Error updating test/external-services-credentials, will retry: crypto/rsa: decryption error\r\n2018/09/04 16:00:22 Updating test/external-services-credentials\r\n2018/09/04 16:00:22 Error updating test/external-services-credentials, giving up: crypto/rsa: decryption error\r\nE0904 16:00:22.589255       1 controller.go:156] crypto/rsa: decryption error\r\n```\r\n\r\nIs the encrypted data somehow tied to the original metadata.name, or anything like that which would prevent me to do what I'm trying to do ?\r\n\r\nThanks"},"comment":{"url":"https://api.github.com/repos/bitnami-labs/sealed-secrets/issues/comments/421196033","html_url":"https://github.com/bitnami-labs/sealed-secrets/issues/113#issuecomment-421196033","issue_url":"https://api.github.com/repos/bitnami-labs/sealed-secrets/issues/113","id":421196033,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMTE5NjAzMw==","user":{"login":"anguslees","id":224224,"node_id":"MDQ6VXNlcjIyNDIyNA==","avatar_url":"https://avatars0.githubusercontent.com/u/224224?v=4","gravatar_id":"","url":"https://api.github.com/users/anguslees","html_url":"https://github.com/anguslees","followers_url":"https://api.github.com/users/anguslees/followers","following_url":"https://api.github.com/users/anguslees/following{/other_user}","gists_url":"https://api.github.com/users/anguslees/gists{/gist_id}","starred_url":"https://api.github.com/users/anguslees/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/anguslees/subscriptions","organizations_url":"https://api.github.com/users/anguslees/orgs","repos_url":"https://api.github.com/users/anguslees/repos","events_url":"https://api.github.com/users/anguslees/events{/privacy}","received_events_url":"https://api.github.com/users/anguslees/received_events","type":"User","site_admin":false},"created_at":"2018-09-14T00:49:33Z","updated_at":"2018-09-14T00:49:33Z","author_association":"CONTRIBUTOR","body":"It's namespace+name because that matches the level that can be described with RBAC policies.  We could certainly invent a namespace-only variation, as is described in #89.\r\n\r\n@renaudguerin: I tried to call out the fact that the SealedSecret is tied to a specific namespace+name in the README.md, with some mention of the attack that this protects against.  Patches to the docs would be gratefully accepted if there's something we can add that would have made this clearer for you."}}
{"actor":{"display_login":"anguslees"}}