Skip to content
English
  • There are no suggestions because the search field is empty.

arpio-config:replication-password-secret

Provide a reference to the Azure Key Vault location where the password for Arpio's read-only replication login is stored.

 Syntax

arpio-config:replication-password-secret = <keyvault-secret-location> 

 Parameter 

Parameter Description
keyvault-secret-location The URL associated with the key vault secret that contains the password for the read-only replication login. Should be in the following format: https://<keyvault-name>.vault.azure.net/secrets/<secret-name>

Supported Resources

  • Azure Database for PostgreSQL Flexible Server

Description

To back up an Azure Database for PostgreSQL Flexible Server, Arpio reads the server's databases and roles through a dedicated, read-only credential. When the source server uses password authentication only, this tag tells Arpio where to find the password for that credential.

Arpio reads the secret at backup time using its delegate identity, which must be granted get permission on the secret (or its Key Vault).

This tag is used only to read the source server at backup time. It is separate from the arpio-config:admin-password-secret tag, which supplies the administrator password used to provision the recovery server.

For the full setup steps, including how to create the read-only login, see the Backup Access Setup section of the PostgreSQL Flexible Server documentation.

Example

Tag Value
arpio-config:replication-password-secret https://my-key-vault.vault.azure.net/secrets/arpio-replication-