AzureBlobKeyRingOptions Class

Points the key ring at an Azure Blob Storage container, one blob per key.

public sealed class AzureBlobKeyRingOptions

Inheritance System.Object → AzureBlobKeyRingOptions

Remarks

Blob rather than a Key Vault secret, though the vault is already there: a secret write has no conditional create, so two pods minting the same period would both succeed and each publish its own key. A blob upload takes If-None-Match: *, which is the insert-if-absent the ring needs.

Properties

AzureBlobKeyRingOptions.Container Property

The container holding the ring. It is created on first use if it does not exist.

public string Container { get; set; }

Property Value

System.String

AzureBlobKeyRingOptions.ServiceUri Property

The blob service endpoint, for example https://myaccount.blob.core.windows.net. The credential is the one the custodian already uses, so no second identity is configured.

public System.Uri ServiceUri { get; set; }

Property Value

System.Uri