Skip to main content

Azure Key Vault

FieldDescriptionScheme
keyID*

Key Vault key URL in the format: https://vault-name.vault.azure.net/keys/key-name

string

tenantId*

The Azure Active Directory tenant ID

EnvVar

clientId

The Azure client/application ID

EnvVar

clientSecret

The Azure client/application secret

EnvVar

connection

The connection url to use, mutually exclusive with tenantId, clientId, and clientSecret

Connection

Example

azurekeyvault.yaml
---
# yaml-language-server: $schema=../../config/schemas/connection.schema.json
apiVersion: mission-control.flanksource.com/v1
kind: Connection
metadata:
name: flanksource-azurekeyvault
spec:
azureKeyVault:
keyID: https://flanksource-keyvault.vault.azure.net/keys/sops-key
tenantID:
valueFrom:
secretKeyRef:
name: azure-flanksource
key: AZURE_TENANT_ID
clientID:
valueFrom:
secretKeyRef:
name: azure-flanksource
key: AZURE_CLIENT_ID
clientSecret:
valueFrom:
secretKeyRef:
name: azure-flanksource
key: AZURE_CLIENT_SECRET