Retirement: Azure Key Vault Secrets Provider Extension for Azure Arc enabled Kubernetes clusters
Analysis / inference: The Azure Key Vault Secrets Provider Extension for Azure Arc-enabled Kubernetes will be retired on October 9, 2027, requiring migration to the Secret Store Extension.
- Published
- 10 Oct 2026, 01:57 AM IST
- Updated
- 10 Oct 2026, 01:57 AM IST
- Source
- Azure updates · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Microsoft announced the formal retirement date of October 9, 2027, for the Azure Key Vault Secrets Provider Extension, directing users to adopt the Azure Key Vault Secret Store Extension instead.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisSOC and infrastructure teams must track component deprecations to prevent unpatched extensions from introducing vulnerabilities or failing compliance standards before support ends.
Clusters utilizing the legacy extension will lose security updates, bug fixes, and support after October 9, 2027, potentially breaking compliance if not migrated to the supported alternative.
Section 03 · Recommended actions
- Review active Azure Arc-enabled Kubernetes clusters for instances of the Azure Key Vault Secrets Provider Extension.
- Plan and execute migration to the Azure Key Vault Secret Store Extension prior to October 9, 2027.
- Leverage workload identity federation and offline secret access capabilities supported by the new extension.
- Identify all Azure Arc-enabled Kubernetes clusters currently running the Azure Key Vault Secrets Provider Extension.
- Review workload dependencies and configurations to plan a migration path to the Azure Key Vault Secret Store Extension.