Azure DevOps 中的 Azure ARM 模板密钥库覆盖 [英] Azure ARM template keyvault override in Azure DevOps

问题描述

如何在 Azure DevOps 中覆盖 ARM 模板 Azure 密钥库引用?我有一个 ARM 模板，它有如下参考:

How can I override the ARM template Azure keyvault reference in Azure DevOps? I have ARM template which has reference like:

"KeyVaultSecret": {
  "reference": {
    "keyVault": {
      "id": "/subscriptions/214124-1241-526-645-lele/resourceGroups/KEYVAULT-RG/providers/Microsoft.KeyVault/vaults/KeyVault"
    },
    "secretName": "VerySecret"
  }
}

但我想在某些情况下覆盖 id 和/或 secretName.

but I would like to override the id and/or secretName in some cases.

推荐答案

你总是可以使用嵌套模板来做到这一点，只需提供一个带值的参数，然后使用嵌套模板来调用它.这里是嵌套模板以获取 KV 值.您可以轻松地将我链接到的硬编码值替换为参数或表达式，这将允许您执行所需的操作.

You can always use nested templates to do that, just provide a parameter with value, and then use nested template to invoke that. Here's that is using nested templates to get KV values. you can easily replace hardcoded value which I link to with a parameter or with expression, which would allow you to do what you need.

您可能会采用类似开关"的方法来根据资源组名称确定所需的值.

You might go as far as implementing a "switch" like approach to determine needed value based on resource group name.

这篇关于Azure DevOps 中的 Azure ARM 模板密钥库覆盖的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！