Document Azure Key Vault permissions support

otterize · Mar 18, 2024 · c98d9c9 · c98d9c9
1 parent 1c33c02
commit c98d9c9
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 0 deletions.
diff --git a/docs/features/azure-iam/index.mdx b/docs/features/azure-iam/index.mdx
@@ -52,6 +52,19 @@ spec:
       type: azure
       azureRoles:
         - "Storage Blob Data Contributor"
+    - name: "/providers/Microsoft.KeyVault/vaults/otterizetutorialazureiamkeyvault"
+      type: azure
+      # Optional - Grant Azure Key Vault data plane access by using Key Vault access policy
+      azureKeyVaultPolicy:
+        certificatePermissions:
+          - "all"
+        keyPermissions:
+          - "all"
+        secretPermissions:
+          - "all"
+        storagePermissions:
+          - "get"
+          - "list"
 ```
 
 ### Automatically generating ClientIntents for Azure IAM

diff --git a/docs/features/azure-iam/reference.mdx b/docs/features/azure-iam/reference.mdx
@@ -21,6 +21,19 @@ spec:
       # one or more Azure roles that will be provided to the specified resources
       azureRoles:
         - "Storage Blob Data Contributor"
+    - name: "/providers/Microsoft.KeyVault/vaults/otterizetutorialazureiamkeyvault"
+      type: azure
+      # Optional - Grant Azure Key Vault data plane access by using Key Vault access policy
+      azureKeyVaultPolicy:
+        certificatePermissions:
+          - "all"
+        keyPermissions:
+          - "all"
+        secretPermissions:
+          - "all"
+        storagePermissions:
+          - "get"
+          - "list"
 ```
 
 ### Annotations

diff --git a/static/code-examples/azure-iam-aks/clientintents.yaml b/static/code-examples/azure-iam-aks/clientintents.yaml
@@ -11,3 +11,7 @@ spec:
       type: azure
       azureRoles:
         - "Storage Blob Data Contributor"
+
+
+
+