README.md

Azure Key Vault FlexVolume Add-on

The Azure Key Vault FlexVolume integrates Azure Key Vault with Kubernetes via a FlexVolume.

With the Azure Key Vault FlexVolume, developers can access application-specific secrets, keys, and certs stored in Azure Key Vault directly from their pods.

Add this add-on to your API model as shown below to automatically enable Key Vault FlexVolume in your new Kubernetes cluster.

{
    "apiVersion": "vlabs",
    "properties": {
      "orchestratorProfile": {
        "kubernetesConfig": {
          "addons": [
            {
              "name": "keyvault-flexvolume",
              "enabled" : true
            }
          ]
        }
      },
      "masterProfile": {
        "count": 1,
        "dnsPrefix": "",
        "vmSize": "Standard_DS2_v2",
      },
      "agentPoolProfiles": [
        {
          "name": "agentpool",
          "count": 3,
          "vmSize": "Standard_DS2_v2",
          "availabilityProfile": "VirtualMachineScaleSets"
        }
      ],
      "linuxProfile": {
        "adminUsername": "azureuser",
        "ssh": {
          "publicKeys": [
            {
              "keyData": ""
            }
          ]
        }
      }
    }
  }

To validate the add-on is running as expected, run the following commands:

You should see the keyvault flexvolume installer pods running on each agent node:

kubectl get pods -n kv

keyvault-flexvolume-f7bx8   1/1       Running   0          3m
keyvault-flexvolume-rcxbl   1/1       Running   0          3m
keyvault-flexvolume-z6jm6   1/1       Running   0          3m

Follow the README at https://github.com/Azure/kubernetes-keyvault-flexvol for get started steps.

To update resources:

"kubernetesConfig": {
        "addons": [
          {
            "name": "keyvault-flexvolume",
            "enabled": true,
            "containers": [
                {
                    "name": "keyvault-flexvolume",
                    "image": "mcr.microsoft.com/k8s/flexvolume/keyvault-flexvolume:v0.0.16",
                    "cpuRequests": "50m",
                    "memoryRequests": "100Mi",
                    "cpuLimits": "50m",
                    "memoryLimits": "100Mi"
                }
            ]
          }
        ]
      }

Supported Orchestrators

Kubernetes