Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Non-public cloud support for Azure Key Vault. #2827

Merged
merged 3 commits into from
Mar 29, 2022

Conversation

v-shenoy
Copy link
Contributor

@v-shenoy v-shenoy commented Mar 26, 2022

Signed-off-by: Vighnesh Shenoy vshenoy@microsoft.com

Azure Key Vault now supports non-public clouds via the cloud parameter.

Sample TriggerAuthentication definition with keyvault.

apiVersion: keda.sh/v1alpha1
kind: TriggerAuthentication
metadata:
  name: triggerauth-name
  namespace: default
spec:
  azureKeyVault:
    vaultUri: <vault-uri>
    credentials:  
      clientId: <active-directory-client-id>
      clientSecret:
        valueFrom:
          secretKeyRef:
            name: <secret-containing-client-password>
            key: <key-within-secret>
      tenantId: <active-directory-tenant-id>
    cloud: # Optional
      type: private # Required
      keyVaultResourceURL: <key-vault-resource-url-for-cloud> # Required when type = private
      activeDirectoryEndpoint: <active-directory-endpoint-for-cloud> # Required when type = private
    secrets: 
    - parameter: <param-name-for-scaled-object>
      name: <secret-name-in-key-vault>

Documentation PR - kedacore/keda-docs#732

Checklist

  • Commits are signed with Developer Certificate of Origin (DCO - learn more)
  • Tests have been added
  • A PR is opened to update our Helm chart (repo) (if applicable, ie. when deployment manifests are modified)
  • A PR is opened to update the documentation on (repo) (if applicable)
  • Changelog has been updated and is aligned with our changelog requirements

Relates to #2733

Signed-off-by: Vighnesh Shenoy <vshenoy@microsoft.com>
@v-shenoy v-shenoy requested a review from a team as a code owner March 26, 2022 11:32
@tomkerkhove
Copy link
Member

Might be good to align the cloud information with scalers maybe?

What about this?

-cloudInfo: # Optional
+cloud:
  type: private # Required
-  keyVaultResourceURL: <key-vault-resource-url-for-cloud> # Required when type = private
+  keyVaultResourceUri: <key-vault-resource-url-for-cloud> # Required when type = private
-  activeDirectoryEndpoint: <active-directory-endpoint-for-cloud> # Required when type = private
+  activeDirectoryUri: <active-directory-endpoint-for-cloud> # Required when type = private

@tomkerkhove
Copy link
Member

Can you open a PR for our docs and link it in this PR please? This is why I tend to use "relates to" instead of "fixes" as we always need a link without closing on this PR.

@v-shenoy
Copy link
Contributor Author

Can you open a PR for our docs and link it in this PR please? This is why I tend to use "relates to" instead of "fixes" as we always need a link without closing on this PR.

Was away for some time, am writing the docs as we speak. I don't get the second part of your comment, can you elaborate a bit?

@v-shenoy
Copy link
Contributor Author

Doc PR - kedacore/keda-docs#732

…ion.

Signed-off-by: Vighnesh Shenoy <vshenoy@microsoft.com>
@v-shenoy
Copy link
Contributor Author

v-shenoy commented Mar 26, 2022

Changed cloudInfo to cloud

Didn't change the keyVaultResourceURL and activeDirectoryEndpoint as the names align with the changes done for EventHub and Application Insights.

@tomkerkhove

@tomkerkhove
Copy link
Member

Fine by me!

@tomkerkhove
Copy link
Member

Can you open a PR for our docs and link it in this PR please? This is why I tend to use "relates to" instead of "fixes" as we always need a link without closing on this PR.

Was away for some time, am writing the docs as we speak. I don't get the second part of your comment, can you elaborate a bit?

Neermind the second part!

Signed-off-by: Vighnesh Shenoy <vshenoy@microsoft.com>
Copy link
Member

@zroubalik zroubalik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@zroubalik zroubalik requested a review from JorTurFer March 29, 2022 07:13
Copy link
Member

@JorTurFer JorTurFer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@JorTurFer
Copy link
Member

Thanks for this improvement! ❤️

@JorTurFer JorTurFer merged commit 4a36fb0 into kedacore:main Mar 29, 2022
@v-shenoy v-shenoy deleted the npc-key-vault branch March 29, 2022 21:20
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants