Merge pull request #1297 from k8s-infra-cherrypick-robot/cherry-pick-1289-to-release-1.23

[release-1.23] chore: only use sas token for azcopy when useDataPlaneAPI is used

Author: k8s-ci-robot

pkg/blob/blob.go

@@ -266,7 +266,7 @@ func NewDriver(options *DriverOptions, kubeClient kubernetes.Interface, cloud *p
 	if d.accountSearchCache, err = azcache.NewTimedCache(time.Minute, getter, false); err != nil {
 		klog.Fatalf("%v", err)
 	}
-	if d.dataPlaneAPIVolCache, err = azcache.NewTimedCache(10*time.Minute, getter, false); err != nil {
+	if d.dataPlaneAPIVolCache, err = azcache.NewTimedCache(24*30*time.Hour, getter, false); err != nil {
 		klog.Fatalf("%v", err)
 	}
 	if d.azcopySasTokenCache, err = azcache.NewTimedCache(15*time.Minute, getter, false); err != nil {

pkg/blob/controllerserver.go

@@ -826,7 +826,7 @@ func (d *Driver) authorizeAzcopyWithIdentity() ([]string, error) {
 func (d *Driver) getAzcopyAuth(ctx context.Context, accountName, accountKey, storageEndpointSuffix string, accountOptions *azure.AccountOptions, secrets map[string]string, secretName, secretNamespace string) (string, []string, error) {
 	var authAzcopyEnv []string
 	useSasToken := false
-	if len(secrets) == 0 && len(secretName) == 0 {
+	if !d.useDataPlaneAPI("", accountName) && len(secrets) == 0 && len(secretName) == 0 {
 		var err error
 		authAzcopyEnv, err = d.authorizeAzcopyWithIdentity()
 		if err != nil {