Secrets Store CSI driver - Integrates secrets stored in external vaults with Kubernetes.
The Secrets Store CSI driver secrets-store.csi.k8s.io allows Kubernetes to mount multiple secrets, keys, and certs stored in enterprise-grade external secrets stores into their pods as a volume. Once the Volume is attached, the data in it is mounted into the container's file system.
The diagram below illustrates how Secrets Store CSI Volume works.
Provider defines the actions for Secrets Store CSI driver. This enables retrieval of sensitive objects stored in an enterprise-grade external secrets store into Kubernetes while continue to manage these objects outside of Kubernetes.
Following providers are currently supported:
Azure Provider for Azure Key Vault
Vault Provider for Hashicorp Vault (EVA)
Refer AKS Ingress TLS sample