Azure / secrets-store-csi-driver-provider-azure

Azure Key Vault provider for Secret Store CSI driver allows you to get secret contents stored in Azure Key Vault instance and use the Secret Store CSI driver interface to mount them into Kubernetes pods.
https://azure.github.io/secrets-store-csi-driver-provider-azure/
MIT License
441 stars 193 forks source link

How can we migrate all existing K8s secrets to Azure Keyvault #1651

Open sherryhao opened 2 months ago

sherryhao commented 2 months ago

Describe the solution you'd like We understand that by using the CSI driver, it simplifies accessing/managing secrets from Azure KeyVault. However, for an existing deployment where several Kubernetes secrets have already been defined, what would be the best way to migrate these secrets to Azure KeyVault and have them automatically created and stored there?

Or we have to create objects in KeyVault manually for all existing secrets?

Thank you so much!

Environment: