setting

migrate secrets from Azure Key Vault to database

post/settings/migrate_secrets_from_azure_kv

Request

  • Base URL: /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/settings/migrate_secrets_from_azure_kv
  • Auth: one of:
    • HTTP bearer
    • API key in cookie token

Request body

vault_urlstring required

Azure Key Vault URL (e.g., https://myvault.vault.azure.net)

tenant_idstring required

Azure AD tenant ID

client_idstring required

Azure AD application (client) ID

client_secretstring

Azure AD client secret. Optional — when omitted, the integration falls back to Azure Workload Identity Federation, exchanging the Kubernetes-projected service-account JWT at AZURE_FEDERATED_TOKEN_FILE for an access token (no long-lived secret stored).

tokenstring

Static Bearer token for testing/development (optional, if provided this is used instead of OAuth2 authentication)

Response

migration report

total_secretsinteger required

Total number of secrets found

migrated_countinteger required

Number of secrets successfully migrated

failed_countinteger required

Number of secrets that failed to migrate

Changes

No recorded changes to this operation across all 293 revisions of this API.