cockroachdb / cockroachdb/docs

Feedback: Cloud Storage Authentication

Open
#21,111 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
212
Forks
476
Avg merge
40m
Merged PRs (30d)
3

Description

Page: https://cockroachlabs.com/docs/v25.3/cloud-storage-authentication.html

## What is the reason for your feedback?

[ ] Missing the information I need

[ ] Too complicated

[x] Out of date

[ ] Something is broken

[ ] Other

## Additional details
Simplify and follow best practices on Azure by recommending Workload Identity
- The current Azure related documents have 4 options - credential file, env variable, managed identity and workload identity. To new azure users it can be overwhelming.
- Deprecate support for Managed Identity as Azure Managed Identity uses pod identity add on https://github.com/Azure/aad-pod-identity which is now deprecated by Microsoft on 10/24/2022, and the project archived in Sept. 2023. Specifically "Pod identity is EoL and does not get security updates anymore."
- Recommend Workload Identity. CockroachDB 25.2+ supports Workload Identity and Workload Identity + Federated IAM is viewed as best practice on azure. Could we recommend Workload Identity or list it as the first option?

Jira issue: DOC-15400

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.