pulumi-hugo-cn/themes/default/content/docs/pulumi-cloud/esc/providers/azure-secrets.md

title_tag, meta_desc, title, h1, meta_image, menu

title_tag	meta_desc	title	h1	meta_image	menu
azure-secrets Pulumi ESC Provider	The azure-secrets Pulumi ESC Provider enables you to dynamically import Secrets from Azure Key Vault into your Environment.	azure-secrets	azure-secrets	/images/docs/meta-images/docs-meta.png	pulumicloud identifier parent weight azure-secrets esc-providers 4

The azure-secrets provider enables you to dynamically import Secrets and Configuration from Azure Key Vault into your Environment. The provider will return a map of names to Secrets.

Example

  azure:
    login:
      fn::open::azure-login:
        clientId: aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee
        tenantId: aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee
        subscriptionId: /subscriptions/00000000-0000-0000-0000-000000000000
        oidc: true
    secrets:
      fn::open::azure-secrets:
        login: ${azure.login}
        vault: example-vault-name
        get:
          api-key:
            name: api-key
          app-secret:
            name: app-secret

Inputs

Property	Type	Description
login	AzureSecretsLogin	Credentials used to log in to Azure.
vault	string	The vault to read from.
get	map[string]AzureSecretsGet	A map from names to secrets to read from Azure Key Vault. The outputs will map each name to the secret's sensitive data.

AzureSecretsLogin

Property	Type	Description
clientId	string	The configured client ID
tenantId	string	The configured tenant ID
subscriptionId	string	The configured subscription ID
clientSecret	string	[Optional] - The client secret used for authentication, if any.
oidc	AzureLoginOIDC	[Optional] - OIDC-related data, if OIDC is used for authentication.

AzureLoginOIDC

Property	Type	Description
token	string	The OIDC token to use for authentication.

AzureSecretsGet

Property	Type	Description
name	string	The name of the secret to import.
version	string	[Optional] - The version of the secret to import.

Outputs

Property	Type	Description
N/A	object	A map of names to imported Secrets.