arpio-config:replication-password-secret
Provide a reference to the Azure Key Vault location where the password for Arpio's read-only replication login is stored.
Syntax
arpio-config:replication-password-secret = <keyvault-secret-location>
Parameter
| Parameter | Description |
|---|---|
keyvault-secret-location |
The URL associated with the key vault secret that contains the password for the read-only replication login. Should be in the following format: https://<keyvault-name>.vault.azure.net/secrets/<secret-name> |
Supported Resources
- Azure Database for PostgreSQL Flexible Server
Description
To back up an Azure Database for PostgreSQL Flexible Server, Arpio reads the server's databases and roles through a dedicated, read-only credential. When the source server uses password authentication only, this tag tells Arpio where to find the password for that credential.
Arpio reads the secret at backup time using its delegate identity, which must be granted get permission on the secret (or its Key Vault).
This tag is used only to read the source server at backup time. It is separate from the arpio-config:admin-password-secret tag, which supplies the administrator password used to provision the recovery server.
For the full setup steps, including how to create the read-only login, see the Backup Access Setup section of the PostgreSQL Flexible Server documentation.
Example
| Tag | Value |
|---|---|
arpio-config:replication-password-secret |
https://my-key-vault.vault.azure.net/secrets/arpio-replication- |