Skip to content

[Feature Request] Support Workload identity authentication towards Azure Blob Storage Snapshot repositoriesΒ #20789

@audunsolemdal

Description

@audunsolemdal

Is your feature request related to a problem? Please describe

Currently it is possible to authenticate to blob storage using Storage Account Key, SAS Token or managed identity.
https://docs.opensearch.org/latest/tuning-your-cluster/availability-and-recovery/snapshots/snapshot-restore/#azure-token-credential

Describe the solution you'd like

As I am running my Opensearch cluster as a helm chart inside an AKS cluster, the security best practice would be the possibility to authenticate via workload identity credential

azure.client.default.token_credential_type: "workload_identity"

Related component

Storage:Snapshots

Describe alternatives you've considered

Using Storage Account Key

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Storage:SnapshotsenhancementEnhancement or improvement to existing feature or request

    Type

    No type

    Projects

    Status

    πŸ†• New

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions