keyvault-csi-driver

What problem does it solves?

This Skill simplifies and secures the process of injecting secrets, keys, and certificates from Azure Key Vault directly into Kubernetes pods. It eliminates the need to store sensitive data in Kubernetes Secrets or application code, reducing attack surface and ensuring compliance.

Core Features & Use Cases

• Dynamic Secret Injection: Mount Key Vault secrets as files into pods or sync them to Kubernetes Secrets.
• Managed Identity Integration: Authenticate securely to Key Vault using Azure Managed Identities, avoiding hardcoded credentials.
• Automated Rotation: Supports automatic rotation of secrets, ensuring applications always use the latest versions.
• Use Case: Configure a database password stored in Key Vault to be mounted as a file in your application pod, and also synced to a Kubernetes Secret for other tools to consume, all without manual intervention.

Quick Start

Use the keyvault-csi-driver skill to create a SecretProviderClass for my 'my-app' in namespace 'dev', fetching the 'my-db-password' secret from 'kv-my-dev' Key Vault.