Azure KeyVault Secrets

GM. Is there a way to make the ts run fail if the vault is not found? I am testing this and it looks like it is forcing a resource replacement with the string value “WARN: Vault not found kv-123”.

Also looking to do some validation on the returned values. I can use terraform variable validation, but some of the values are optional. Not sure how to handle those.


Interesting. For optional values wondering if using Ruby to access the value, and fall back to a null or blank string would work. There’s a little more control by using ruby.

Unsure. Maybe worth a try. Otherwise, like you mentioned, you could use terraform variable validation. Hope that helps.