Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow usage of alternative credentials for Blob storage access #60

Open
bnubald opened this issue Nov 3, 2024 · 0 comments · Fixed by #61
Open

Allow usage of alternative credentials for Blob storage access #60

bnubald opened this issue Nov 3, 2024 · 0 comments · Fixed by #61
Assignees
Labels
bug Something isn't working

Comments

@bnubald
Copy link
Contributor

bnubald commented Nov 3, 2024

Current implementation works if the user deploying icenet-etl has Owner or RBAC level access, if it doesn't the icenet-geoapi-processing will fail in processing the uploaded netCDF file from the Blob storage and saving it into the file-system (it just creates a zero-byte file).

With Contributor level access, for the deployment to work, it requires one of the following:

  • Service Principal with at least "Storage Blob Data Reader" read-only access permission.
  • Managed Identity with same access level as above.
  • SAS Token with Read/List level access.
@bnubald bnubald added the bug Something isn't working label Nov 3, 2024
@bnubald bnubald self-assigned this Nov 3, 2024
bnubald added a commit to bnubald/icenet-etl that referenced this issue Nov 3, 2024
…ccess

Service Principal option also included, but commented out
bnubald added a commit to bnubald/icenet-etl that referenced this issue Nov 3, 2024
bnubald added a commit that referenced this issue Nov 3, 2024
Resolves #60: Allows specifying an SAS token for Blob read access
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant