Improve docs of vault.Secret and vault.Key

[thomas11]

Currently, their descriptions are simply

Resource information with extended details.

and

The key resource.

which is unhelpful.

We should also document how to create a certificate, since there's no dedicated resource for certs.

[isaac-jordan]

@thomas11 Any pointers on how to create a certificate in this case? Struggling to find out how to do it.

[thomas11]

Hi @isaac-jordan, the Pulumi provider doesn't support the Key Vault certificate API at this point, since it's not modeled in the Azure resource API spec. You have some options, though:

1. Create the certificate locally, using any library of your choice, and store it in KV as an opaque blob. We've done that on occasion.

const certificateSecret = new azureNative.keyvault.Secret("certificateSecret", {
    resourceGroupName: resourceGroup.name,
    vaultName: keyVault.name,
    secretName: "myCertificate",
    properties: {
        value: "<base64-encoded-certificate>", // Replace with your base64-encoded certificate
    },
});

2. Use the KV SDKs directly in your program, probably inside an apply.

3. Use the Command provider to model a command to create the certificate - maybe using az - as a proper Pulumi resource.