Does anyone have a good azure service for config m...
# azurek
kind-mechanic-53546
07/29/2020, 3:27 AMDoes anyone have a good azure service for config management?
I'd like to export all my config (endpoints, secrets, connection strings, hostnames etc...) to have 1 consolidated place, currently, it's spread over 10 odd pulumi stacks
In AWS, I'd use SSM Parameter store, but Azure App Configuraton is 1) not supported by Terraform or Pulumi and 2) expensive
c
colossal-room-15708
07/29/2020, 5:19 AMThe best service for this would be Azure Key Vault.
k
kind-mechanic-53546
07/29/2020, 6:49 AMI was afraid that would be the answer 🙂
kind-mechanic-53546
07/29/2020, 6:50 AMI'm doing that with secrets now, but it's a terrible interface compared to SSM Parameters
kind-mechanic-53546
07/29/2020, 6:51 AMThis is the presentation on the console
kind-mechanic-53546
07/29/2020, 6:51 AMits 3 clicks to get to the tags which I put the description of the resource in 🙂
kind-mechanic-53546
07/29/2020, 6:51 AMhorrible UX
kind-mechanic-53546
07/29/2020, 6:51 AManyway, thanks 🙂
c
colossal-room-15708
07/29/2020, 7:05 AMThat UX depends on how you do it.
Plus, if you don't care about encryption of values in the UI / API then maybe cosmos DB or storage accounts tables might be enough
https://docs.microsoft.com/en-us/azure/cosmos-db/table-storage-overview
k
kind-mechanic-53546
07/29/2020, 8:33 AMmust be encrypted & hidden and RBAC'd for secrets
c
colossal-room-15708
07/29/2020, 10:43 AMIn which case it'll be Key Vault.
Understand though that RBAC (for now) only works on the vault, not on secrets.
👍 1
5 Views