Skip to main content
Question

Can we use Azure secret in IFS installation scripts

  • December 25, 2024
  • 6 replies
  • 41 views

Forum|alt.badge.img+6

Can we Store our password in  Azure secret and use those  in IFS installation scripts

AshenR
Hero (Partner)
Forum|alt.badge.img+9
  • Hero (Partner)
  • December 27, 2024

@NuwanK Do you mean that during the IFS installation, it is possible to reference passwords stored in the Azure Key Vault?


Forum|alt.badge.img+6
  • Sidekick (Partner)
  • December 27, 2024

Yes. rather than hard coding in the yaml file. 


AshenR
Hero (Partner)
Forum|alt.badge.img+9
  • Hero (Partner)
  • December 27, 2024

@NuwanK So far, such an option is not available for remote deployment. However, cloud deployment via an AKS Cluster should have this possibility.


Forum|alt.badge.img+10
  • Hero (Employee)
  • January 7, 2025

The way to use a Vault for secrets is to write a wrapper script to the installer that passes all sensitive parameters individually to the installer.

This is a wrapper script from a PoC i made with a local Hashicorp Vault.

 


my_installer_wrapper.cmd
-----------------------
 

set VAULT_ADDR = "http://127.0.0.1:8200"

set VAULT_TOKEN = "s.2wKMpndo5MH2b9Qomma56qV2"

 

.\installer.cmd --values .\ifscloud-values.yaml `

--values .\solutionset.yaml `

--set action=mtinstaller `

--set ifscore.secrets.jdbcUrl.data=$(c:\temp\H-vault\vault kv get -field=ifs-jdbc-url ifscloud/values) `

--set ifscore.passwords.ifssysPassword.data=$(c:\temp\H-vault\vault kv get -field=ifssys-password ifscloud/values)


AshenR
Hero (Partner)
Forum|alt.badge.img+9
  • Hero (Partner)
  • January 9, 2025

@hhanse Great, thanks for sharing this info.


Forum|alt.badge.img+6
  • Sidekick (Partner)
  • January 13, 2025

@hhanse Thank you , I will try this. 


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings