Installing the Azure Key Vault provider for Secrets Store CSI driver

In the previous section, you explored secrets that were stored natively in Kubernetes. This means they were base64-encoded on the Kubernetes API server. You saw in the previous section that base64-encoded secrets are not secure at all. For highly secure environments, you will want to use a better secret store.

Azure offers an industry-compliant key and secret storage solution called Azure Key Vault. It is a managed service that makes creating, storing, and retrieving keys and secrets easy, and offers auditing of access to your keys and secrets.

The Kubernetes community maintains a project called the Kubernetes Secrets Store CSI driver (https://github.com/kubernetes-sigs/secrets-store-csi-driver). This project allows you to integrate external secret stores with volumes in Kubernetes through the CSI driver. The Container Storage Interface is a standardized way in Kubernetes to interface with storage systems. There...