Adds support to get/set secret values in AZD configuration#3755
Conversation
ellismg
left a comment
There was a problem hiding this comment.
I like this approach - I think the separation of concerns between the persistence layer and the config layer feels right.
90b5cee to
ac4224b
Compare
Azure Dev CLI Install InstructionsInstall scriptsMacOS/Linux
bash: pwsh: WindowsPowerShell install MSI install Standalone Binary
MSIDocumentationlearn.microsoft.com documentationtitle: Azure Developer CLI reference
|
Adds the following functions to the
Configinterface:SetSecretThe following functions have been updated:
Get/GetString- If the config entry contains a vault reference, the secret value will automatically be retrieved from the vault and returned to the caller.When secrets are stored a new config vault is created @
${AZD_CONFIG_DIR}/vaults/${VAULT_ID}.jsonImportant
Secrets stored in
azdshould only be used for development purposes.In production scenarios managed identities should be leveraged as much as possible.
If managed identities are not supported a secure solution like Azure Key Vault should be used.