Sops not work with GCP, I got timeout.

[spidemen2]

| failed to decrypt sops data key with GCP KMS key: context
| deadline exceeded

I did login GCP and still cannot make it work

It always timeout with vpn or without vpn.

[joshbrand]

seeing this as well, on sops 3.9.1 with GCP KMS curiously in our case, disabling VPN (tailscale) makes sops succeed. 3.9.0 works in both cases.

example output:

➜ sops --verbose -d test.enc.yaml   
[GCPKMS]         INFO[0060] Decryption failed                             resourceID=[redacted]
Failed to get the data key required to decrypt the SOPS file.

Group 0: FAILED
  [redacted]: FAILED
    - | failed to decrypt sops data key with GCP KMS key: context
      | deadline exceeded

Recovery failed because no master key was able to decrypt the file. In
order for SOPS to recover the file, at least one key has to be successful,
but none were.

[smelchior]

I also ran into the same behavior with a GCP KMS key. Seems a bit odd that a VPN changes the way sops works?