How to use a secrets CSI driver (volume) with webhook event source

[andrei-dascalu]

Hello,

I am using argo events with webhook event sources and I need to secure the webhook with a token.
To do that I need to create a secret containing the token and use it as such.

However, I am using Azure AKS and its KeyVault storage for secrets, meaning that in most cases I'm mounting KeyVault secrets into Kubernetes secrets using the azure csi driver, which requires to mount a virtual volume into a pod, which will result in a secret being generated via its secrets provider.

To use it with Argo webhook, I would need to customize the eventsource pod such that it will mount a secrets provider volume, solely for the purpose of generating said secret with values populated from Keyvault.

I wasn't able to find anything to this effect in the docs, is this even possible ?