Azure Key Vault provider for Secrets Store CSI driver allows you to get secret contents stored in Azure Key Vault instance and use the Secrets Store CSI driver interface to mount them into Kubernetes pods.
Quick start instructions for the setup and configuration of secrets-store-csi-driver and azure keyvault provider using Helm.
- This chart installs the secrets-store-csi-driver and the azure keyvault provider for the driver
$ helm repo add csi-secrets-store-provider-azure https://raw.githubusercontent.com/Azure/secrets-store-csi-driver-provider-azure/master/charts
$ helm install csi-secrets-store-provider-azure/csi-secrets-store-provider-azure --generate-name
The following table lists the configurable parameters of the csi-secrets-store-provider-azure chart and their default values.
Parameter | Description | Default |
---|---|---|
nameOverride |
String to partially override csi-secrets-store-provider-azure.fullname template with a string (will prepend the release name) | "" |
fullnameOverride |
String to fully override csi-secrets-store-provider-azure.fullname template with a string | "" |
image.repository |
Image repository | mcr.microsoft.com/k8s/csi/secrets-store/provider-azure |
image.pullPolicy |
Image pull policy | IfNotPresent |
image.tag |
Azure Keyvault Provider image | 0.0.6 |
linux.enabled |
Install azure keyvault provider on linux nodes | true |
linux.nodeSelector |
Node Selector for the daemonset on linux nodes | beta.kubernetes.io/os: linux |
linux.resources |
Resource limit for provider pods on linux nodes | requests.cpu: 50m requests.memory: 100Mi limits.cpu: 50m limits.memory: 100Mi |
windows.enabled |
Install azure keyvault provider on windows nodes | false |
windows.nodeSelector |
Node Selector for the daemonset on windows nodes | beta.kubernetes.io/os: windows |
windows.resources |
Resource limit for provider pods on windows nodes | requests.cpu: 100m requests.memory: 200Mi limits.cpu: 100m limits.memory: 200Mi |
secrets-store-csi-driver.install |
Install secrets-store-csi-driver with this chart | true |
secrets-store-csi-driver.linux.enabled |
Install secrets-store-csi-driver on linux nodes | true |
secrets-store-csi-driver.linux.kubeletRootDir |
Configure the kubelet root dir | /var/lib/kubelet |
secrets-store-csi-driver.windows.enabled |
Install secrets-store-csi-driver on windows nodes | false |
secrets-store-csi-driver.windows.kubeletRootDir |
Configure the kubelet root dir | C:\var\lib\kubelet |