Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add managed identity and service principal authentication in Azure Go blob service client #7733

Closed
ion-elgreco opened this issue May 7, 2024 · 1 comment
Labels

Comments

@ion-elgreco
Copy link

Managed identity and SP authentication is safer than access keys, it would be great if we can use those to authenticate, since we already use that for LakeFS anyways.

It's now not possible to use Azure client in Lua hooks with proper security in place.

@ozkatz
Copy link
Collaborator

ozkatz commented May 22, 2024

We plan on introducing support for secret management for hooks. Managed identity means users will be able to leverage the existing identity attached to lakeFS which could lead to security exposure (privilege escalation).

@ozkatz ozkatz closed this as completed May 22, 2024
@ozkatz ozkatz added the wontfix label May 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants