[RESOVLED] Ability to create/sync k8s secrets from azure key vault?

[brahmiam]

Hi

I may be missing something glaringly obvious.

With Azure AD pod identity, I am able to load k8s secrets and certs from key vault automatically so I can use them directly for pods, ingresses (typically storing credentials for elasticsearch authentication, loading the cert for the ingresses)

I have been able to deploy the quick start for Azure workload identity, but that doesn't address my requirement, which is the ability to have natively k8s secrets loaded from key vaults.

Given that the AD pod identity is deprecated, what would be the long term solution for the above use case?

Again, let me know if I got the wrong end of the stick

Thanks in advance for your help

Mehdi

[brahmiam]

hi
I believe I have found the answer to my own question, which is how to adjust the secretproviderclass for azure workload identity.

And the answer is here : https://azure.github.io/secrets-store-csi-driver-provider-azure/docs/configurations/identity-access-modes/workload-identity-mode/

I suggest to make reference it in the azure workload identity documentation as I suspect other might be asking the same question.

Thanks

Mehdi