Azure Key Vault Provider for Secrets Store CSI Driver

Azure Key Vault provider for Secrets Store CSI Driver allows you to get secret contents stored in an Azure Key Vault instance and use the Secrets Store CSI driver interface to mount them into Kubernetes pods.

Features

• Mounts secrets/keys/certs to pod using a CSI Inline volume
• Supports mounting multiple secrets store objects as a single volume
• Supports multiple secrets stores as providers. Multiple providers can run in the same cluster simultaneously.
• Supports pod portability with the SecretProviderClass CRD
• Supports Linux and Windows containers
• Supports sync with Kubernetes Secrets
• Supports auto rotation of secrets

Demo

Getting started

Setup the correct role assignments and access policies and install Azure Keyvault Provider for Secrets Store CSI Driver through Helm or YAML deployment files. Get familiar with how to use the Azure Keyvault Provider and supported configurations.

Try our walkthrough to get a better understanding of the application workflow.

Contributing

Please refer to CONTRIBUTING.md for more information.

Release

Currently, this project releases monthly to patch security vulnerabilities, and bi-monthly for new features. We target the second week of the month for release.

Code of Conduct

This project has adopted the Microsoft Open Source Code of Conduct. For more information, see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.

Support

Azure Key Vault Provider for Secrets Store CSI Driver is an open source project that is not covered by the Microsoft Azure support policy. Please search open issues here, and if your issue isn't already represented please open a new one. The project maintainers will respond to the best of their abilities.

However, Arc extension and AKS addon for Azure Key Vault Provider for Secrets Store CSI Driver are managed offerings and supported by Microsoft Azure support policy.