Use app "Azure Key Vault to Kubernetes" to deploy cert to k8s

[bengtfredh]

Description

Today we already store cert in Azure Key Vault. Cert get downloaded by az cli in pipeline, and added to cluster by terraform. The downside with this is cert is downloaded on an agent filesystem. We only use the agent for 1 run before it get redeployed. We need to run pipeline to deploy new certs in cluster

With Azure Key Vault to Kubernetes (https://akv2k8s.io/) it will check for updated cert on a schedule and download cert to cluster when updated.

• Get akv2k8s approved from security @alt-how
• Deploy akv2k8s

Additional Information

Azure Key Vault to Kubernetes (akv2k8s) makes Azure Key Vault secrets, certificates and keys available in Kubernetes and/or your application - in a simple and secure way.

akv2k8s can have more use cases than only download cert.

[ghost]

Looks like an improvement. It is also maintained by Sparebanken Vest.