Mirrors/flux2
1
0
Fork 0
mirror of synced 2026-02-06 19:05:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update authentication hint for Azure

Browse Source 
Signed-off-by: Philip Laine <philip.laine@xenit.se>
This commit is contained in:
Philip Laine
2020-11-07 16:03:47 +01:00
parent 1911766b7b
commit b036999b8c
1 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/guides/mozilla-sops.md
View File

@@ -102,10 +102,12 @@ Note that the `sops-gpg` can contain more than one key, sops will try to decrypt
secrets by iterating over all the private keys until it finds one that works. secrets by iterating over all the private keys until it finds one that works.
!!! hint KMS !!! hint KMS
When using AWS/GCP KMS or Azure Key Vault, you'll have to bind an IAM Role When using AWS/GCP KMS, you'll have to bind an IAM Role
with read access to the KMS keys to the `default` service account of the with read access to the KMS keys to the `default` service account of the
`flux-system` namespace for kustomize-controller to be able to fetch `flux-system` namespace for kustomize-controller to be able to fetch
keys from KMS. keys from KMS. When using Azure Key Vault you need to authenticate the kustomize controller either by passing
[Service Principal credentials as environment variables](https://github.com/mozilla/sops#encrypting-using-azure-key-vault)
or with [add-pod-identity](https://github.com/Azure/aad-pod-identity).
## GitOps workflow ## GitOps workflow