You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@arrow.apache.org by "Tom-Newton (via GitHub)" <gi...@apache.org> on 2023/11/06 09:06:05 UTC
[I] [C++] Implement all important authentication methods for Azure filesystem [arrow]
Tom-Newton opened a new issue, #38598:
URL: https://github.com/apache/arrow/issues/38598
### Describe the enhancement requested
So far the Azure filesystem implementation only supports account key authentication. This is ok initially during development but for normal operation role-based access control (RBAC) is recommended.
Azure authentication that I think are important to supported (roughly ordered with most important first):
- Azure default credential (implemented by trying a few of the other methods in sequence) https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/src/default_azure_credential.cpp
- Workload identity https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/src/workload_identity_credential.cpp
- Managed identity https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/src/managed_identity_source.cpp
- Client secret https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/src/client_secret_credential.cpp
- Azure CLI https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/src/azure_cli_credential.cpp
- Environment https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/src/environment_credential.cpp
- SAS token. I believe SAS token just needs to be appended to the URL in the right places.
- None, for un-secured accounts
**Related Issues:**
- https://github.com/apache/arrow/issues/18014 (is a child of)
### Component(s)
C++
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@arrow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [C++] Implement all important authentication methods for Azure filesystem [arrow]
Posted by "Tom-Newton (via GitHub)" <gi...@apache.org>.
Tom-Newton commented on issue #38598:
URL: https://github.com/apache/arrow/issues/38598#issuecomment-1850667891
Ok :+1:. I'll probably make each individual auth method a sub ticket of this ticket.
I plan to start working on this quite soon.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [C++] Implement all important authentication methods for Azure filesystem [arrow]
Posted by "pitrou (via GitHub)" <gi...@apache.org>.
pitrou commented on issue #38598:
URL: https://github.com/apache/arrow/issues/38598#issuecomment-1845519019
> Can we split this issue to each authentication method?
Seconded. What we did in S3 is simply start with the simplest methods (anonymous, secret key) and then let contributors add whichever auth method they needed.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [C++] Implement all important authentication methods for Azure filesystem [arrow]
Posted by "kou (via GitHub)" <gi...@apache.org>.
kou commented on issue #38598:
URL: https://github.com/apache/arrow/issues/38598#issuecomment-1809448024
Can we split this issue to each authentication method?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org