mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-23 15:41:07 +02:00
8f6e95f1a3
* seo updates for config docs * fix content errors * Make KMS title consistent with other stanza titles
75 lines
2.6 KiB
Plaintext
75 lines
2.6 KiB
Plaintext
---
|
||
layout: docs
|
||
page_title: Azure configuration
|
||
description: >-
|
||
Configure Vault backend storage to use Azure storage containers.
|
||
---
|
||
|
||
# Azure configuration for Vault backend storage
|
||
|
||
The Azure storage backend is used to persist Vault's data in an
|
||
[Azure Storage Container][azure-storage]. The storage container must already
|
||
exist and the provided account credentials must have read and write permissions
|
||
to the storage container. The storage account type must support block blobs. This
|
||
currently includes the general purpose "Storage V2" type with _Standard_ performance
|
||
(Premium will not work), as well as Premium "Block Blob Storage"
|
||
([limited region availability](https://azure.microsoft.com/en-us/global-infrastructure/services/?products=storage®ions=all)).
|
||
|
||
- **No High Availability** – the Azure storage backend does not support high
|
||
availability.
|
||
|
||
- **Community Supported** – the Azure storage backend is supported by the
|
||
community. While it has undergone review by HashiCorp employees, they may not
|
||
be as knowledgeable about the technology. If you encounter problems with them,
|
||
you may be referred to the original author.
|
||
|
||
```hcl
|
||
storage "azure" {
|
||
accountName = "my-storage-account"
|
||
accountKey = "abcd1234"
|
||
container = "container-efgh5678"
|
||
environment = "AzurePublicCloud"
|
||
}
|
||
```
|
||
|
||
The current implementation is limited to a maximum of 4 megabytes per blob.
|
||
|
||
## `azure` parameters
|
||
|
||
- `accountName` `(string: <required>)` – Specifies the Azure Storage account
|
||
name.
|
||
|
||
- `accountKey` `(string: <optional>)` – Specifies the Azure Storage account key,
|
||
if left empty, uses managed identity auth.
|
||
|
||
- `container` `(string: <required>)` – Specifies the Azure Storage Blob
|
||
container name.
|
||
|
||
- `environment` `(string: "AzurePublicCloud")` - Specifies the cloud
|
||
environment the storage account belongs to by way of the case-insensitive
|
||
name defined in the [Azure Go SDK][azure-environment].
|
||
|
||
- `arm_endpoint` `(string: "")` - Specifies the cloud environment
|
||
the storage account belongs to by way of the Azure Resource Manager endpoint
|
||
URL.
|
||
|
||
- `max_parallel` `(string: "128")` – Specifies The maximum number of concurrent
|
||
requests to Azure.
|
||
|
||
## `azure` examples
|
||
|
||
This example shows configuring the Azure storage backend with a custom number of
|
||
maximum parallel connections.
|
||
|
||
```hcl
|
||
storage "azure" {
|
||
accountName = "my-storage-account"
|
||
accountKey = "abcd1234"
|
||
container = "container-efgh5678"
|
||
max_parallel = 512
|
||
}
|
||
```
|
||
|
||
[azure-storage]: https://azure.microsoft.com/en-us/services/storage/
|
||
[azure-environment]: https://godoc.org/github.com/Azure/go-autorest/autorest/azure#pkg-variables
|