Azure Key Vault get Secret from VMSS Instances

1
votes

Does someone have a solution to get a Azure Key Vault Secret from a VMSS Instance? For a single VM I found this article: https://docs.microsoft.com/en-us/azure/key-vault/tutorial-python-linux-virtual-machine#create-edit-and-run-the-sample-python-app

Can I do something similar like that for a VMSS Instance? With the Python Script from the Microsoft Documentation I have the following issue. I can't reach the Key Vault URL from the Instance with this Request. (Request Timeout.) 

requests.get(url = KeyVaultURL, headers = {"Authorization": "Bearer " + data["access_token"]})

The VMSS has a LoadBalancer with a Public IP Address. And the Instances in the Backendpool have only one NIC (Private IP). The Vault and the VMSS are in different Resource Groups.

Do you have any idea why i cant reach the Key Vault from my Instances? Because if the Identity (Access Policy) would be the problem, i should get a 4xx and not a timeout.

Thanks KR

1
azureazure-keyvault
why not? what have you tried? – Thiago Custodio
I tried exactly this python script on my VMSS Instance. But I can't reach my Key Vault. (Connection Timeout.) – Radeonx

1 Answers

2
votes

I think if you assign a managed identity to vmss through portal and test it again it should work.

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vmss