Skip to main content

Secret Manager

The initial deployment stores the key used to encrypt secrets in Cado locally on the machine. Enabling a Secret Manager allows Cado to instead store the key in Azure Key Vault.

Prerequisites​

  • Ability to create a Key Vault
  • Ability to update Role Assignments

Steps​

  1. In the resource group click Create and search for “Key Vault” and select “Key Vault”
  2. Add a Key vault name
  3. Set Access Configuration to “Vault access policy”
  4. On “Access policies” search for “cado-identity” and select. Confirm the Client ID is the correct one.

Secret Manager

  1. Go to the created resource. Copy the “Vault URI”
  2. Enable in the UI: Settings > Advanced > Secret Management > Turn on Secrets Manager