azureazure-keyvaultmozilla-sops

Mozilla SOPS & Azure Key Vault define `.sops.yaml`

I can't find the example of how to use Azure Keyvault with Mozilla SOPS in .sops.yaml. All examples I saw in the WEB and provided here https://github.com/mozilla/sops#211using-sopsyaml-conf-to-select-kmspgp-for-new-files for AWS. Anyone saw Azure Key Vault example?

Solution

  • TL;DR

    Use azure_keyvault to configure AKV in .sops.yaml.

    The official documentation lacks a clear description for that and actually can be a bit misleading. While the section Using .sops.yaml conf to select KMS/PGP for new files shows the --gcp-kms flag being mapped to gcp_kms in the .sops.yaml file, the --azure-kv flag doesn't map to azure_kv, but instead azure_keyvault.

    This specific detail can be found in the source code.

    Credits to @feniix who pointed this out in a GitHub issue.