v106

OpenAPI 3.0.3Apache 2.0raw.githubusercontent.com2026-08-03812347972.4 KB

setting

migrate secrets from Azure Key Vault to database

post/settings/migrate_secrets_from_azure_kv

Request body

vault_urlstring required

Azure Key Vault URL (e.g., https://myvault.vault.azure.net)

tenant_idstring required

Azure AD tenant ID

client_idstring required

Azure AD application (client) ID

client_secretstring

Azure AD client secret. Optional — when omitted, the integration falls back to Azure Workload Identity Federation, exchanging the Kubernetes-projected service-account JWT at AZURE_FEDERATED_TOKEN_FILE for an access token (no long-lived secret stored).

tokenstring

Static Bearer token for testing/development (optional, if provided this is used instead of OAuth2 authentication)

Response

migration report

total_secretsinteger required

Total number of secrets found

migrated_countinteger required

Number of secrets successfully migrated

failed_countinteger required

Number of secrets that failed to migrate