INNER CODE UNIT · TypeScript

populateEnvironmentFromKeyVault

Azure-Samples/contoso-real-estate · packages/api-legacy/config/index.ts:49

const populateEnvironmentFromKeyVault = async () => {
  // If Azure key vault endpoint is defined
  // 1. Login with Default credential (managed identity or service principal)
  // 2. Overlay key vault secrets on top of ENV vars
  const keyVaultEndpoint = process.env.AZURE_KEY_VAULT_ENDPOINT || "";

  if (!keyVaultEndpoint) {
    logger.warn("AZURE_KEY_VAULT_ENDPOINT has not been set. Configuration will be loaded from current environment.");
    return;
  }

  try {
    logger.info("Populating environment from Azure KeyVault...");
    const credential = new DefaultAzureCredential();
    const secretClient = new SecretClient(keyVaultEndpoint, credential);

    for await (const secretProperties of secretClient.listPropertiesOfSecrets()) {
      const secret = await secretClient.getSecret(secretProperties.name);

View source record →