Azure Key Vault Provider for Secrets Store CSI Driver

Azure Key Vault provider for Secrets Store CSI Driver allows you to get secret contents stored in an Azure Key Vault instance and use the Secrets Store CSI driver interface to mount them into Kubernetes pods.

Project Status

For Secrets Store CSI Driver project status and supported versions, check the doc here

Features

• Mounts secrets/keys/certs to pod using a CSI Inline volume
• Supports mounting multiple secrets store objects as a single volume
• Supports multiple secrets stores as providers. Multiple providers can run in the same cluster simultaneously.
• Supports pod portability with the SecretProviderClass CRD
• Supports Linux and Windows containers
• Supports sync with Kubernetes Secrets
• Supports auto rotation of secrets

Managed Add-ons

Azure Key Vault provider for Secrets Store CSI Driver is available as a managed add-on in:

• Azure Kubernetes Service (AKS). For more information, see Use the Azure Key Vault Provider for Secrets Store CSI Driver in an AKS cluster.
• Azure Arc enabled Kubernetes. For more information, see Use the Azure Key Vault Secrets Provider extension to fetch secrets into Azure Arc-enabled Kubernetes clusters.