BC Observatoryunofficial, made by waldo
community postAL Developmentcommunity - not Microsoftreviewed - checked by Opus

New feature in Fkh: A KeyVault and secrets handling

Fkh now deploys an Azure Key Vault in your own subscription to securely store and manage secrets like admin passwords and API tokens. You can manage secrets through VS Code or CLI commands, reference them in parameters using @secretName@ syntax, and prepare for future integration with AL-Go repositories and container access.

Open in Claudehttps-freddysblog-com-2026-08-19-new-feature-in-fkh-keyvault-and-secrets-handling--fcb0e31f1b.md

post Freddys blog

Freddy Kristiansen · 2026-08-19 · 1,216 words · about 6 min

"Anywhere a parameter value is written as @secretName@, Fkh substitutes it with the corresponding secret from the Key Vault before the operation runs."
Show the post hereRead on Freddys blog

Key points

  • Fkh deploys a dedicated Azure Key Vault in your subscription with Standard or Premium SKU options, controlled by a single configuration setting
  • Manage secrets via VS Code or CLI using list, set, and get operations with RBAC-based access tied to GitHub identity and team membership
  • Secrets can be personal or shared organization-wide, with personal secrets taking priority when looked up
  • Reference secrets in operation parameters using @secretName@ syntax instead of typing values repeatedly
  • Foundation for planned features like AL-Go integration and container KeyVault access

Quotes

  • “Anywhere a parameter value is written as @secretName@, Fkh substitutes it with the corresponding secret from the Key Vault before the operation runs.” (Shows how secrets are referenced in practice without exposing actual values in configurations, enabling safe parameter handling across operations)
  • “Having a proper, trusted Key Vault in every Fkh deployment is the foundation for a couple of things I have on my mind.” (Indicates this is foundational infrastructure enabling future features like AL-Go integration and container secret access)

Context

  • Features: Azure Key Vault deployment, Secret management operations, VS Code integration, CLI support, Parameter secret references, Personal and shared secrets, RBAC-based access control, HSM-backed Premium option
  • Versions: latest preview

Source: Freddys blog, community blog. Summary, key points and quotes are derived (CONTENT-NOTICE.md); read the original for the full text.