Using configurations with Azure Container Apps
Azure Container Apps supports specifying environment variables, and secrets. In Chapter 6, when we created the container app, we configured environment variables and secrets. Environment variables of a container app can be configured on creating the application or afterward when updating the application – for example, using az
containerapp update
.
Environment variables may be visible in log files. For secrets, this can be a security issue. Security sniffers can catch secrets that are configured in environment variables and alert system administrators when these are found. With container apps, secrets are stored within the scope of an application but independent of revisions of the application.
To get even better security for secrets, container app secrets can be connected to secrets with the Azure Key Vault service. The Key Vault service and additional features we get for secrets are discussed later in this chapter.
When...