Container Apps / KeyVault / Terraform

Azure Container Apps – secrets [part 5]

Posted on:

Azure Container Apps – secrets, every application typically needs to reference some secrets. To achieve this, I’ll demonstrate how to load secrets into Azure Container Apps using Azure KeyVault. While it’s not currently feasible to do this solely with Terraform due to the absence of a provider for adding secrets from Key Vault, I’ll guide you through the process in this article. You may view all of the series’ about […]

Container Apps / Terraform

Azure Container Apps – traffic splitting [part 4]

Posted on:

Azure Container Apps – traffic splitting, or having multiple revisions of your application and sharing traffic between them. You can specify the weight for each route, so the traffic load can be adjusted properly. The total of all weights must be 100. In my configuration, I assign a revision suffix to each deployment. You may view all of the series’ articles here. Azure Container Apps – traffic splitting – Terraform setup […]

Container Apps / Terraform

Azure Container Apps – Creating using Terraform [part 1]

Posted on:

Azure Container Apps – Creating using Terraform, which used to be challenging. Why? Because a lot of tasks required the usage of the notoriously difficult-to-use AzApi, we recently began to be able to develop Azure Container Apps utilizing only resources from the AzureRM provider. This is wonderful news! All sources are included in this article and are available for download. Enjoy! Let’s begin with the developed architecture: Azure Container Apps […]

KeyVault / Terraform

Azure KeyVault – RBAC as a security best practice

Posted on:

Azure KeyVault – RBAC as a security best practice. For those who are new to this, I hope this essay will guide you in authorizing access to Azure KeyVault. In KeyVault, there are currently two methods for specifying access to the data plane (secrets, certificates, and keys). Please see the table below: Feature Access policy RBAC Grant access to secrets/certificates/keys yes yes Grant access to specific secret/certificate/key no yes Use […]