Repository navigation
PMP Key Vault updates - #12079
Open
katarzyna-koltun-mx wants to merge 6 commits into
Open
PMP Key Vault updates#12079katarzyna-koltun-mx wants to merge 6 commits into
katarzyna-koltun-mx wants to merge 6 commits into
Conversation
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
| For environments which do not use `azure-wi` plans, the managed identity (UAMI) must be manually created by the customer before enabling Key Vault. Since the | ||
| * **Cluster** and **Namespace** - Select the cluster and namespace where you previously enabled secret store support. | ||
| * **Database Plan** and **Storage Plan** - Select an azure-wi database and/or storage plan. | ||
| * **Secrets** - Select the check box **Use external secret store for environment configurations**. |
Contributor
There was a problem hiding this comment.
🚫 [vale] reported by reviewdog 🐶
[Mendix.CompoundWords] Use 'checkbox' instead of 'check box'
| Private Mendix Platform automatically determines the correct path. When you enable the secret store for an environment, Private Mendix Platform checks whether a Kubernetes ServiceAccount already exists for that environment. | ||
| * **Cluster** and **Namespace** - Select the cluster and namespace where you previously enabled secret store support. | ||
| * **Database Plan** and **Storage Plan** - Select a database and/or storage plan without `azure-wi`. | ||
| * **Secrets** - Select the check box **Use external secret store for environment configurations**. |
Contributor
There was a problem hiding this comment.
🚫 [vale] reported by reviewdog 🐶
[Mendix.CompoundWords] Use 'checkbox' instead of 'check box'
Updated formatting for clarity in prerequisites section.
Nidhi251289
reviewed
Oct 26, 2026
| 2. Switch to Admin Mode by clicking the profile picture in the top right corner of the screen and selecting **Switch to Admin Mode**. | ||
| 3. In the left navigation menu, open the **Manage** section and go to **Deployment > Cluster Manager**. | ||
| 4. Edit the target environment and toggle **Enable Secret Store**. | ||
| 5. Select **Manual** as the mode. Private Mendix Platform detects that no ServiceAccount exists yet, and prompts the user to provide a Client ID. |
Contributor
There was a problem hiding this comment.
@katarzyna-koltun-mx what is the purpose of writing this section. Ideally we need to write that the customer while creating the new environment should enable secret store in env creation flow.
| #### Modifying the Operation Configuration | ||
|
|
||
| {{% alert color="info" %}} | ||
| The steps in this section are not necessary if .your Managed Identity was already created by Mendix Operator. |
Contributor
There was a problem hiding this comment.
Can you fix this sentence
Contributor
There was a problem hiding this comment.
@katarzyna-koltun-mx kinldy fix this line
he steps in this section are not necessary if .your Managed Identity was already created by Mendix Operator.
|
|
||
| 1. Update the configuration to [use the service token](/developerportal/deploy/private-cloud-cluster/#advanced-deployment-settings). | ||
|
|
||
| Set `runtimeAutomountServiceAccountToken: true` to allow Mendix app pods to get a Kubernetes Service Account token. |
Contributor
There was a problem hiding this comment.
Did u checked with Shreyas for this option under Configuring Azure AD Workload Identity
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.