有哪些适用于 Azure 容器实例的机密存储可用且有意义的解决方案？

Question

What are available, meaningful ( secure, easy to store/use ) solutions for storing secrets that can be used by the instances of Docker containers hosted in Azure Container Instance?

Easy to store/use definition:

• Use of environmental variable to access vault secrets directly.
• Automated setup of secrets from PowerShell that can be easily modified for another app.

Context

I'm building an app - the .NET Core 3.x background service hosted in Azure Container Instance. It is a pilot project for a new line of development in my company. We have a 3rd party solution for storing secrets outside code repository. It's used by all members of Dev team. This solution produce per-user and per-machine dependency which are unnecessarily complicated for use in Docker images.

Investigated solutions:

Azure Key Vault

I spent half day with reading about Azure Key Vault. I've read some tutorials about using it and how to setup the vault and authorize the app. Honestly, I was quite lost. I wasn't able to make a decision if this is a suitable solution for our needs.

Answer 1

Sorry for the delay in responding.

I would suggest using the Key Vault task to get the secrets as build environment variables then in the CLI script when you create the container pass the secrets in as environment variables then your .Net Core app can simply get them from the environment.

There is also a labs on this too if that helps