Support for Azure secret store CSI

[aelmanaa]

Hello,

I see that there are efforts to include AZure file csi & Azure ad pod identity projects in AKS and make them part of GA.
Are there similar plans for AZure secret store csi? https://github.com/Azure/secrets-store-csi-driver-provider-azure

In fact, this project is really important as it allowas to directly fetchs secrets & certificates from Azure keyvault

thanks

[ghost]

Hi aelmanaa, AKS bot here 👋
Thank you for posting on the AKS Repo, I'll do my best to get a kind human from the AKS team to assist you.

I might be just a bot, but I'm told my suggestions are normally quite good, as such:

1. If this case is urgent, please open a Support Request so that our 24/7 support team may help you faster.
2. Please abide by the AKS repo Guidelines and Code of Conduct.
3. If you're having an issue, could it be described on the AKS Troubleshooting guides or AKS Diagnostics?
4. Make sure your subscribed to the AKS Release Notes to keep up to date with all that's new on AKS.
5. Make sure there isn't a duplicate of this issue already reported. If there is, feel free to close this one and '+1' the existing issue.
6. If you have a question, do take a look at our AKS FAQ. We place the most common ones there!

[ghost]

Triage required from @Azure/aks-pm

[tomkerkhove]

I fully agree!

[andyzhangx]

Answer is Yes, will update when there is any progress, it's now in early evaluation stage.

[ZeroMagic]

If someone uses SP and needs the feature, look at this issue Azure/secrets-store-csi-driver-provider-azure#281, and feel free to add your comments.

[PixelRobots]

Looks like this can be done already in preview.

I did a little blog about it. https://pixelrobots.co.uk/2021/04/azure-key-vault-access-on-azure-kubernetes-service-using-the-new-aks-add-on/

[miwithro]

https://docs.microsoft.com/en-us/azure/aks/csi-secrets-store-driver

[PixelRobots]

Thanks for the official docs. Really good page.

[yogeshpatiltr]

Do you have ETA to release this AKS-AzureKeyVaultSecretsProvider feature to GA(Generally Available)?

[deepak-malhotra]

The Helm chart deployments are usually supported earlier than the add-ons . Is there any ETA on support for using CSI via Helm ?

[andyzhangx]

@ZeroMagic any rough ETA of secret store CSI driver GA on AKS?

[ZeroMagic]

After upstream project GA(https://github.com/kubernetes-sigs/secrets-store-csi-driver/milestone/5), will start the GA work of AKS-AzureKeyVaultSecretsProvider feature. The ETA is September/October.

[rukawata]

@ZeroMagic When will AKS-AzureKeyVaultSecretsProvider be available for AzureUSGovernment

[ZeroMagic]

@ZeroMagic When will AKS-AzureKeyVaultSecretsProvider be available for AzureUSGovernment

@rukawata It will be the part of GA work.

[tomkerkhove]

Add-on for Arc is now in preview: https://techcommunity.microsoft.com/t5/azure-arc-blog/in-preview-azure-key-vault-secrets-provider-extension-for-arc/ba-p/3002160

[palma21]

GA