cloudnative-pg / cloudnative-pg/plugin-barman-cloud
Add DefaultAzureCredential auth mechanism support
- Dominant language
- Go
- Stars
- 191
- Forks
- 72
- Avg merge
- 1d 16h
- Merged PRs (30d)
- 18
Description
The current ObjectStore API doesn't support authenticating to Azure using [DefaultAzureCredential](https://learn.microsoft.com/en-us/dotnet/api/azure.identity.defaultazurecredential?view=azure-dotnet). This is a limitation in AKS environments where `managed-identities` are not configured.
Even if the environment is configured to use the app Service Principal with variables `AZURE_CLIENT_ID`, `AZURE_TENANT_ID`, and `AZURE_CLIENT_SECRET` the barman-cloud client attempts to authenticate using the managed-identity and fails if not available.
Contributor guide
Research direction
Start with the ObjectStore API and the barman-cloud client authentication path, then review the DefaultAzureCredential documentation linked in the issue. Confirm how AZURE_CLIENT_ID, AZURE_TENANT_ID, and AZURE_CLIENT_SECRET are handled, and consider the work complete when configured service-principal credentials authenticate successfully without requiring a managed identity.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, go
- Domain
- authentication, backend, cloud
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100