Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Spring Grove] Use workload identity to access Azure blob in SDK automation #8353

Closed
Tracked by #8039
raych1 opened this issue May 29, 2024 · 1 comment
Closed
Tracked by #8039
Assignees

Comments

@raych1
Copy link
Member

raych1 commented May 29, 2024

Context
Currently, SDK automation uses a key to access Azure blob storage, and a SAS token is also used to construct an URL for accessing the blob. Per the Spring Grove requirement, we must replace the use of keys and SAS tokens for Azure blob access with managed identity.

Proposal
As SDK automation is integrated into the Azure DevOps pipeline, we can leverage the workload identity associated with a service connection to interact with Azure resources.

Specially, by using DefaultAzureCredential from azure/identity package, we can automatically fetch the workload identity in the Azure DevOps context. Additionally, it can fetch the token when debugging locally with Azure CLI login.

@raych1 raych1 self-assigned this May 29, 2024
@raych1 raych1 moved this from Backlog to In Progress in API to SDK automation May 29, 2024
@raych1 raych1 moved this from In Progress to Done in API to SDK automation Jun 11, 2024
@raych1
Copy link
Member Author

raych1 commented Jun 21, 2024

This issue has been fixed.

@raych1 raych1 closed this as completed Jun 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

No branches or pull requests

1 participant