Day-20 | Azure Key Vault Integration with AKS | Kubernetes Secret Store CSI Driver with Azure Vault

[@wiz__obi]

completed the demo successfully... Thanks to you Abhi, i perfectly understand the OIDC Federation, managed identity and CSI concept.

[@AbhishekVeeramalla]

😍

[@hidass2006]

@AbhishekVeeramalla To understand the topics you have taken the multiple approach to explain the details instead of repeating same things for your subcribers or whose is egar to learn it....❤❤❤

[@AbhishekVeeramalla]

Thanks

[@234bellamkonda]

Implemented everything as is, everything worked great!! Thank you

[@AbhishekVeeramalla]

You're welcome!

[@letspasstime]

Really great video. Keep making such detailed videos. Thanks Abhishek.

[@wiz__obi]

Thanks for this demo Abhi

[@AbhishekVeeramalla]

My pleasure 😊

[@soumyadipchatterjee2267]

This is absolutely top notch explanation from you Abhishek bhai 💗.😀. Can you please assist me how we can write the Docker service connection parameter post adding the key pair value in Azure secrets vault .

[@uggamk]

thanks for the video bro. small doubt, you are using managed identity to have access between resources. but how can we use managed identity if they are in different subscriptions..does managed identity work in between resources in different subscriptions

[@AutoRanger6397]

Yes Monitoring is most asked in interviews

[@sureshg7124]

Clear explanation - But need practise on my end

[@AbhishekVeeramalla]

Thanks

[@arpitjindal9036]

Hello @Abhishek. Can we create the system managed identity and associate it with virtual machine scale set and create a secret storage provider class and mount that secret to the pod . Can we do this way ! If yes, Which is more feasible way. I request you to please through some light on this topic as well and request you to pelase create a video where if you can explain what are the different way to integrate AKS with any Azure Services and what is suitable in what scneario as this would definitely help lot of people to understnd when to use system mg identity, when to use user assigned mg identity and when to use Service Principal. If you can clear out this in any video then this would be of great use to everyone and the community as well.

[@Mr.Troubleshooter-fq1op]

I completed all the steps and verified them in the console but at the final stage, the pod remained in the "container creating" state due to an RBAC issue. Due to time constraints, I was unable to troubleshoot this issue fully. but yes I gained a clear understanding of Azure Key Vault and how pods access external vault using managed identity through the CSI driver and the vault vendor provider running on k8s cluster as daemon sets.

[@AbhishekVeeramalla]

😍😍😍

[@dummymail6029]

great video and thanks alot abhishek

[@thejaswarup]

Thanks, how do people use the mounted secrets as environment variables for any app inside pod. Recommended way.

[@manjithshaik6221]

Can we expect a video on aks workload identity implementation in this series ??

[@AbhishekVeeramalla]

We implemented workload identity in this video

[@DheemanDas]

One-man army:).. hopefully, one day I'll possess one-fourth of your knowledge

[@AbhishekVeeramalla]

😍

[@jhhggghhhhhhhvvf]

is this tutorial complete for azure bcs I want to star please reply 🙏

[@Sixwins]

Thank you so much for sharing this video. I have a question. Using the secretproviderclass, how can secret be injected for ingress to consume. Imagine my wildcard certificate and key is present In a path in Hashicorp vault. I tried to do this but since Ingres doesn’t mount volume it didn’t work. How can I achieve this? Thank you

[@divyanshisingh5233]

after running the list cmd. I'm unable to see two files with key1 and secret1 name the output is showing no such directory found

[@md.shamsuzzaman4156]

Thanks

[@nanduchannel]

hi abhi, 41:18 for this, you might be --assignee first come then --role will later as per error message instructions, I am not sure may be it's work

[@AbhishekVeeramalla]

May be yeah, I did not troubleshoot much as I was recording.

[@vadhervijay]

How can we assign ssl certificate stored key valut to either port or AG ingress controller so applications can be securely accessed over internet?

[@elvinafukah6672]

Much appreciated sir❤❤❤

[@AbhishekVeeramalla]

My pleasure

[@venkateshNoudy]

Thanks a lot for this video...🤩

[@AbhishekVeeramalla]

Most welcome 😊

[@The_boogie_tales]

Where are you executing those commands?? Is it CMD? Or other terminal im kinda confused please help

[@AbhishekVeeramalla]

Please start with day 1 of devops zero to hero course. Btw I am using the mac in built terminal

[@The_boogie_tales]

In windows what can we use then? ​@@AbhishekVeeramalla

[@Vinn.V]

@@The_boogie_tales you can use powershell, makesure azurecli is installed

[@SPavanRaj]

Hi Abhishek, Please can you help us in the last part when creating the pod its going into container creating state. i have checked the permissions its given as how you gave. I see other person in the chat also faced the same issue PLEASE ABHISHEK! Thanks. Pavan

[@AbhishekVeeramalla]

You should create key1 and secret1 in key vault. You might have not created them. You can describe the pod to see what is the error, it should be the error mostly.

[@SPavanRaj]

@@AbhishekVeeramalla I have created with different name for key and secret updated those names in the Storage Provider Class When I do describe pods it says Caller is not authorized to perform action on resource. But I have double checked and given permissions as you gave

[@maikolpelaez1229]

hello in the documentation git adjustament this line export KEYVAULT_SCOPE=$(az keyvault show --name $KEYVAULT_NAME -g $RESOURCE_GROUP --query id -o tsv) , this error is for -g $RESOURCE_GROUP no mapping.

[@shrishailpatil8619]

Thank you Anna❤

[@AbhishekVeeramalla]

Thanks

[@ThecookBoy]

Like AWS secret manager to Eks integration can you make that video anna

[@AbhishekVeeramalla]

Sure

[@skmonjurulhaque6011]

Will it be the same step for integration azure AKS with azure app config using key vault reference?

[@AbhishekVeeramalla]

You can follow the managed identity steps in the video

[@skmonjurulhaque6011]

Thanks. @@AbhishekVeeramalla . I was able to do it.

[@aneef01]

Where the playlist can u provide link please

[@reneshmlal2809]

Thank You ❤

[@nageswararao3525]

Hashicorp Vault Integration Tutorial... We need

[@AbhishekVeeramalla]

Its already available. Check the terraform playlist

[@nageswararao3525]

I mean Integration with various tools like Jenkins, Docker, Kubernetes, Helm.

[@nageswararao3525]

Thanks for u reply.. Ur effort and making videos on GitDevSecOps just... AMAZING

[@bhavatharinigowda2411]

Thank you so much

[@AbhishekVeeramalla]

You're most welcome

[@SreenivasNussum]

Explain about azure admin job in real time scenario.

[@AbhishekVeeramalla]

Sure

[@phamcongtoan1399]

Please guide me through the order of watching your video listings .

[@AbhishekVeeramalla]

DevOps Zero to hero AWS / Azure Zero to Hero Terraform Zero to Hero Python for DevOps

[@phamcongtoan1399]

@@AbhishekVeeramalla thanks

[@chipTuanDuc]

Thanks sir 🥇🥇🥇🥇🥇🥇

[@AbhishekVeeramalla]

😍😍😍

[@ShaikAbdulRahman-q8d]

Hi annaya mito matladi anna Ela contact avvali

[@jitendramalan4068]

❤

[@AbhishekVeeramalla]

Thanks

[@TheGrowthDiarie]

keyvault name needs to be unique , we cannot use your keyvalut name