Skip to content

Commit 1150cdc

Browse files
Merge pull request #232426 from rgardler-msft/docs-editor/csi-secrets-store-driver-1680026459
[Doc-a-thon] Fix bash code blocks
2 parents c3c15e1 + dbbb650 commit 1150cdc

File tree

1 file changed

+32
-10
lines changed

1 file changed

+32
-10
lines changed

articles/aks/csi-secrets-store-driver.md

Lines changed: 32 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,9 @@ A container using subPath volume mount won't receive secret updates when it's ro
7575
7676
```bash
7777
kubectl get pods -n kube-system -l 'app in (secrets-store-csi-driver,secrets-store-provider-azure)'
78+
```
7879
80+
```output
7981
NAME READY STATUS RESTARTS AGE
8082
aks-secrets-store-csi-driver-4vpkj 3/3 Running 2 4m25s
8183
aks-secrets-store-csi-driver-ctjq6 3/3 Running 2 4m21s
@@ -129,14 +131,17 @@ After the pod starts, the mounted content at the volume path that you specified
129131
130132
* Use the following commands to validate your secrets and print a test secret.
131133
134+
To show secrets held in the secrets store:
132135
```bash
133-
## show secrets held in secrets-store
134136
kubectl exec busybox-secrets-store-inline -- ls /mnt/secrets-store/
135-
136-
## print a test secret 'ExampleSecret' held in secrets-store
137-
kubectl exec busybox-secrets-store-inline -- cat /mnt/secrets-store/ExampleSecret
138137
```
139138
139+
To display a secret in the store, for example this command shows the test secret `ExampleSecret`:
140+
141+
```
142+
kubectl exec busybox-secrets-store-inline -- cat /mnt/secrets-store/ExampleSecret
143+
```
144+
140145
## Obtain certificates and keys
141146
142147
The Azure Key Vault design makes sharp distinctions between keys, secrets, and certificates. The Key Vault service’s certificates features were designed to make use of its key and secret capabilities. When a key vault certificate is created, an addressable key and secret are also created with the same name. The key allows key operations, and the secret allows the retrieval of the certificate value as a secret.
@@ -208,13 +213,17 @@ A key vault certificate also contains public x509 certificate metadata. The key
208213
209214
* To disable autorotation, first disable the addon. Then, re-enable the addon without the `enable-secret-rotation` parameter.
210215
211-
```azurecli-interactive
212-
# disable the addon
213-
az aks addon disable -g myResourceGroup -n myAKSCluster2 -a azure-keyvault-secrets-provider
216+
Disable the secrets provider addon:
214217
215-
# re-enable the addon without the `enable-secret-rotation` parameter
216-
az aks addon enable -g myResourceGroup -n myAKSCluster2 -a azure-keyvault-secrets-provider
217-
```
218+
```azurecli-interactive
219+
az aks addon disable -g myResourceGroup -n myAKSCluster2 -a azure-keyvault-secrets-provider
220+
```
221+
222+
Re-enable the secrets provider addon, but without the `enable-secret-rotation` parameter:
223+
224+
```bash
225+
az aks addon enable -g myResourceGroup -n myAKSCluster2 -a azure-keyvault-secrets-provider
226+
```
218227

219228
### Sync mounted content with a Kubernetes secret
220229

@@ -339,17 +348,30 @@ In this article, you learned how to use the Azure Key Vault Provider for Secrets
339348

340349
<!-- LINKS INTERNAL -->
341350
[az-aks-create]: /cli/azure/aks#az-aks-create
351+
342352
[az-aks-enable-addons]: /cli/azure/aks#az-aks-enable-addons
353+
343354
[az-aks-disable-addons]: /cli/azure/aks#az-aks-disable-addons
355+
344356
[csi-storage-drivers]: ./csi-storage-drivers.md
357+
345358
[identity-access-methods]: ./csi-secrets-store-identity-access.md
359+
346360
[aad-pod-identity]: ./use-azure-ad-pod-identity.md
361+
347362
[aad-workload-identity]: workload-identity-overview.md
363+
348364
[az-keyvault-create]: /cli/azure/keyvault#az-keyvault-create.md
365+
349366
[az-keyvault-secret-set]: /cli/azure/keyvault#az-keyvault-secret-set.md
367+
350368
[az-aks-addon-update]: /cli/azure/aks#addon-update.md
351369

352370
<!-- LINKS EXTERNAL -->
353371
[kube-csi]: https://kubernetes-csi.github.io/docs/
372+
354373
[reloader]: https://github.com/stakater/Reloader
374+
355375
[kubernetes-version-support]: ./supported-kubernetes-versions.md?tabs=azure-cli#kubernetes-version-support-policy
376+
377+

0 commit comments

Comments
 (0)