Skip to content

Commit 6af0a26

Browse files
authored
Replace 'System' by 'system' to use System-Managed Identity to access key vault secret
Replace 'System' by 'system' to use System-Managed Identity to access key vault secret. When creating in the portal and exporting the template, it uses 'system'. When creating with 'System' it is not recognized in the portal when the secret is edited. For Dapr component, it is 'system' and not 'System'.
1 parent d99623d commit 6af0a26

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/container-apps/manage-secrets.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -162,14 +162,14 @@ Secrets are defined at the application level in the `resources.properties.config
162162
{
163163
"name": "queue-connection-string",
164164
"keyVaultUrl": "<KEY-VAULT-SECRET-URI>",
165-
"identity": "System"
165+
"identity": "system"
166166
}],
167167
}
168168
}
169169
}
170170
```
171171

172-
Here, a connection string to a queue storage account is declared in the `secrets` array. Its value is automatically retrieved from Key Vault using the specified identity. To use a user managed identity, replace `System` with the identity's resource ID.
172+
Here, a connection string to a queue storage account is declared in the `secrets` array. Its value is automatically retrieved from Key Vault using the specified identity. To use a user managed identity, replace `system` with the identity's resource ID.
173173

174174
Replace `<KEY-VAULT-SECRET-URI>` with the URI of your secret in Key Vault.
175175

@@ -191,7 +191,7 @@ az containerapp create \
191191
--secrets "queue-connection-string=keyvaultref:<KEY_VAULT_SECRET_URI>,identityref:<USER_ASSIGNED_IDENTITY_ID>"
192192
```
193193

194-
Here, a connection string to a queue storage account is declared in the `--secrets` parameter. Replace `<KEY_VAULT_SECRET_URI>` with the URI of your secret in Key Vault. Replace `<USER_ASSIGNED_IDENTITY_ID>` with the resource ID of the user assigned identity. For system assigned identity, use `System` instead of the resource ID.
194+
Here, a connection string to a queue storage account is declared in the `--secrets` parameter. Replace `<KEY_VAULT_SECRET_URI>` with the URI of your secret in Key Vault. Replace `<USER_ASSIGNED_IDENTITY_ID>` with the resource ID of the user assigned identity. For system assigned identity, use `system` instead of the resource ID.
195195

196196
> [!NOTE]
197197
> The user assigned identity must have access to read the secret in Key Vault. System assigned identity can't be used with the create command because it's not available until after the container app is created.

0 commit comments

Comments
 (0)