I opened a Git Issue for this a while back now, but as it's had no traction I thought I'd ask in here instead and see if anyone has been able to work around the issue.
The issue we are seeing is that when using the jasypt-encryption storage convertor in conjunction with Hashicorp Vault for secrets storage, the data is not being decrypted when accessed. It gets encrypted on the way in to Vault, but then stays that way.
We can see from enabling debug logging for operations, that the SSH keys we are storing are not being decrypted before the executor tries to use them. If we disable encryption then it's all fine. If we switch back to the default secrets storage mechanism then data is decrypted fine.
I'd love to get Rundeck running, as it fits what we need to do right now in terms of running a mix of job types and not needing to run K8S just to bootstrap it, so any help would be much appreciated.