search

hashicorp / vault-plugin-secrets-azure

Vault Azure Secrets plugin
Mozilla Public License 2.0
26 stars 19 forks source link

Authenticate to Azure with Certificate Based authentication and Arc enabled MSI #66

Open TechyMatt opened 3 years ago

TechyMatt commented 3 years ago

Today Vault is only able to authenticate to Azure using Client ID/Client Secret or MSI (if hosted in Azure). I have two questions related to this:

  1. Would a PR be accepted to enable Certificate Based authentication? The current go-autorest SDK supprots AZURE_CERTIFICATE_PATH and AZURE_CERTIFICATE_PASSWORD so the existing login logic could be iterated.

  2. Are there any plans or reasons not to migrate from go-autorest to azidentity module to allow for Azure ARC enabled MSIs?

Thanks!

MMollyy commented 9 months ago

Considering the message from Azure that secrets will be deprecated in favor of certificates: I'm replying to this to give it a little bump.