Skip to content

blob/azblob: feat added in MSI based authentication for Azure buckets#2873

Merged
vangent merged 2 commits into
google:masterfrom
chrismellard:master
Nov 20, 2020
Merged

blob/azblob: feat added in MSI based authentication for Azure buckets#2873
vangent merged 2 commits into
google:masterfrom
chrismellard:master

Conversation

@chrismellard

Copy link
Copy Markdown
Contributor

Fixes #2870

@google-cla google-cla Bot added the cla: yes Google CLA has been signed! label Oct 23, 2020
@codecov

codecov Bot commented Oct 23, 2020

Copy link
Copy Markdown

Codecov Report

Merging #2873 (9123e4d) into master (3be68e8) will decrease coverage by 0.26%.
The diff coverage is 6.38%.

Impacted file tree graph

@@            Coverage Diff             @@
##           master    #2873      +/-   ##
==========================================
- Coverage   66.81%   66.54%   -0.27%     
==========================================
  Files         116      116              
  Lines       11945    11990      +45     
==========================================
- Hits         7981     7979       -2     
- Misses       3301     3346      +45     
- Partials      663      665       +2     
Impacted Files Coverage Δ
blob/azureblob/azureblob.go 79.56% <6.38%> (-8.29%) ⬇️
pubsub/pubsub.go 91.95% <0.00%> (-1.05%) ⬇️
pubsub/rabbitpubsub/rabbit.go 79.92% <0.00%> (-0.76%) ⬇️
blob/s3blob/s3blob.go 88.42% <0.00%> (+0.52%) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 3be68e8...9123e4d. Read the comment docs.

@vangent

vangent commented Nov 6, 2020

Copy link
Copy Markdown
Contributor

See my question on the bug.

@chrismellard

Copy link
Copy Markdown
Contributor Author

@vangent Couldn't see a specific question on the bug? I've rebased after the azure-storage-blob mod bump. Let me know what is outstanding please

@vangent

vangent commented Nov 11, 2020

Copy link
Copy Markdown
Contributor

@vangent Couldn't see a specific question on the bug? I've rebased after the azure-storage-blob mod bump. Let me know what is outstanding please

#2870 (comment)

@vangent
vangent self-requested a review November 20, 2020 21:48
@vangent
vangent merged commit b9d3b99 into google:master Nov 20, 2020
stanhu added a commit to stanhu/go-cloud that referenced this pull request Dec 18, 2020
Prior to google#2873, setting the
environment variable `AZURE_STORAGE_SAS_TOKEN` would work because the
default behavior was to open the bucket via the environment. However,
that pull request changed the behavior to only use the environment if an
account key were provided, but the SAS token can be thought of as a
temporary key.

To fix this, we check whether an account key or a SAS token is
provided. If one of them is available, open the container with the
environment.

Closes google#2933
stanhu added a commit to stanhu/go-cloud that referenced this pull request Dec 18, 2020
Prior to google#2873, setting the
environment variable `AZURE_STORAGE_SAS_TOKEN` would work because the
default behavior was to open the bucket via the environment. However,
that pull request changed the behavior to only use the environment if an
account key were provided, but the SAS token can be thought of as a
temporary key.

To fix this, we check whether an account key or a SAS token is
provided. If one of them is available, open the container with the
environment.

Closes google#2933
stanhu added a commit to stanhu/go-cloud that referenced this pull request Dec 18, 2020
Prior to google#2873, setting the
environment variable `AZURE_STORAGE_SAS_TOKEN` would work because the
default behavior was to open the bucket via the environment. However,
that pull request changed the behavior to only use the environment if an
account key were provided, but the SAS token can be thought of as a
temporary key.

To fix this, we check whether an account key or a SAS token is
provided. If one of them is available, open the container with the
environment.

Closes google#2933
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla: yes Google CLA has been signed!

Projects

None yet

Development

Successfully merging this pull request may close these issues.

blob/azureblob: Support for querying credentials from the Instance Metadata Service

2 participants