cloudnative-pg / cloudnative-pg/plugin-barman-cloud

Add DefaultAzureCredential auth mechanism support

Open
#662 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
191
Forks
72
Avg merge
1d 16h
Merged PRs (30d)
18

Description

The current ObjectStore API doesn't support authenticating to Azure using [DefaultAzureCredential](https://learn.microsoft.com/en-us/dotnet/api/azure.identity.defaultazurecredential?view=azure-dotnet). This is a limitation in AKS environments where `managed-identities` are not configured.

Even if the environment is configured to use the app Service Principal with variables `AZURE_CLIENT_ID`, `AZURE_TENANT_ID`, and `AZURE_CLIENT_SECRET` the barman-cloud client attempts to authenticate using the managed-identity and fails if not available.

Contributor guide

Open the contributing guide

Research direction

Start with the ObjectStore API and the barman-cloud client authentication path, then review the DefaultAzureCredential documentation linked in the issue. Confirm how AZURE_CLIENT_ID, AZURE_TENANT_ID, and AZURE_CLIENT_SECRET are handled, and consider the work complete when configured service-principal credentials authenticate successfully without requiring a managed identity.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, go
Domain
authentication, backend, cloud
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.