12-secrets-akv.md

Challenge 12: Secrets & Azure Key Vault

< Previous Challenge - Home - Next Challenge >

Refactor your delpoyments to use Azure Key Vault.

Your CISO is happy with your great work so far, but she is still concerned about managing the credentials in a Kubernetes Secret. She now asks you to place all secrets in an Azure Key Vault.

For this challenge, refactor your deployments to store the secrets in an Azure Key Vault.

Success Criteria

• No static passwords or credentials are stored anywhere in Kubernetes or in any manifests
• All credentials must be stored in Azure Key Vault
  • Hint: The CSI Secrets Store Driver is required to achieve the required results.

Learning Resources

These docs may help you achieving these objectives:

• Azure Key Vault
• AKV provider for secrets store CSI driver
• Sync Mounted Content with Kubernetes Secret and Set your Environment Variable to Reference a Kubernetes Secret