You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-app-configuration/reference-kubernetes-provider.md
+23-21Lines changed: 23 additions & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -45,8 +45,8 @@ The `spec.keyValues` has the following child properties. The `spec.keyValues.key
45
45
|---|---|---|---|
46
46
|selectors|The list of selectors for key-value filtering|false|object array|
47
47
|trimKeyPrefixes|The list of key prefixes to be trimmed|false|string array|
48
+
|refresh|The settings for refreshing data from Azure App Configuration. If the property is absent, data from Azure App Configuration will not be refreshed|false|object|
48
49
|keyVaults|The settings for Key Vault references|conditional|object|
49
-
|refresh|The settings for refreshing the key-values in ConfigMap or Secret|false|object|
50
50
51
51
If the `spec.keyValues.selectors` property isn't set, all key-values with no label will be downloaded. It contains an array of *selector* objects, which have the following child properties.
52
52
@@ -55,13 +55,29 @@ If the `spec.keyValues.selectors` property isn't set, all key-values with no lab
55
55
|keyFilter|The key filter for querying key-values|true|string|
56
56
|labelFilter|The label filter for querying key-values|false|string|
57
57
58
+
59
+
60
+
The `spec.keyValues.refresh` property has the following child properties.
61
+
62
+
|Name|Description|Required|Type|
63
+
|---|---|---|---|
64
+
|monitoring|The key-values monitored for change detection, aka sentinel keys. The data from Azure App Configuration will be refreshed only if at least one of the monitored key-values is changed|true|object|
65
+
|interval|The interval at which the data will be refreshed from Azure App Configuration. It must be greater than or equal to 1 second. If the property is absent, a default value of 30 seconds will be used|false|duration string|
66
+
67
+
The `spec.keyValues.refresh.monitoring.keyValues` is an array of objects, which have the following child properties.
68
+
69
+
|Name|Description|Required|Type|
70
+
|---|---|---|---|
71
+
|key|The key of a key-value|true|string|
72
+
|label|The label of a key-value|false|string|
73
+
58
74
The `spec.keyValues.keyVaults` property has the following child properties.
59
75
60
76
|Name|Description|Required|Type|
61
77
|---|---|---|---|
62
-
|target|The destination of resolved Key Vault references in Kubernetes|true|object|
78
+
|target|The destination of the retrieved secrets in Kubernetes|true|object|
63
79
|auth|The authentication method to access Key Vaults|false|object|
64
-
|refresh|The settings for periodically resolving Key Vault references|false|object|
80
+
|refresh|The settings for refreshing data from Key Vaults. If the property is absent, data from Key Vaults will not be refreshed|false|object|
65
81
66
82
The `spec.keyValues.keyVaults.target` property has the following child property.
67
83
@@ -89,21 +105,7 @@ The `spec.keyValues.keyVaults.refresh` property has the following child property
89
105
90
106
|Name|Description|Required|Type|
91
107
|---|---|---|---|
92
-
|interval|The interval for Secret's refresh, must be greater than 1 minute|true|duration string|
93
-
94
-
The `spec.keyValues.refresh` property has the following child properties.
95
-
96
-
|Name|Description|Required|Type|
97
-
|---|---|---|---|
98
-
|monitoring|The key-values that are monitored by the provider, provider automatically refreshes the ConfigMap or Secret if value change in any designated key-value|true|object|
99
-
|interval|The interval for refreshing, default value is 30 seconds, must be greater than 1 second|false|duration string|
100
-
101
-
The `spec.keyValues.refresh.monitoring.keyValues` is an array of objects, which have the following child properties.
102
-
103
-
|Name|Description|Required|Type|
104
-
|---|---|---|---|
105
-
|key|The key of a key-value|true|string|
106
-
|label|The label of a key-value|false|string|
108
+
|interval|The interval at which the data will be refreshed from Key Vault. It must be greater than or equal to 1 minute. The Key Vault refresh is independent of the App Configuration refresh configured via `spec.keyValues.refresh`|true|duration string|
107
109
108
110
## Examples
109
111
@@ -292,10 +294,10 @@ spec:
292
294
label: development
293
295
```
294
296
295
-
### Periodically resolve KeyVault References
296
-
Setting `spec.keyValues.keyVaults.refresh` property enables the provider periodically resolve Key Vault references to get the latest version secrets from Azure Key Vault, and update the values for associated data items in generated Kubernetes secret accordingly.
297
+
### Periodically reload KeyVault secrets
298
+
Setting `spec.keyValues.keyVaults.refresh` property enables the provider periodically reload the latest version secrets from Azure Key Vault, and update the values for associated data items in generated Kubernetes secret accordingly.
297
299
298
-
The following sample instructs secret refresh with 10 mintues resolving interval.
300
+
The following sample instructs secret refresh with 10 minutes reloading interval.
0 commit comments