Open suqin-haha opened 3 months ago
Same as https://github.com/Azure/azure-sdk-for-go/issues/19841
Looking into now
Hi @suqin-haha! We are aware that we don't currently have cross tenant auth in Key Vault. Planning to add this functionality.
Hi @suqin-haha! We are aware that we don't currently have cross tenant auth in Key Vault. Planning to add this functionality.
Thanks @gracewilcox
And Could the SDK also have a region
field in the key information?
The purpose of this get key cross tenant
feature is for Key Validation when costumers provide their own key. In the same scenario, the region is also important since DiskEncryptionSet
requuires key in the Same region. Although, there is a hacky way to get the region, https://learn.microsoft.com/en-us/answers/questions/1661177/how-to-get-azure-key-key-vault-region, but it's better if we could have a region
field in the key information. :)
Bug Report
"github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys"
azkeys@v1.1.0
: https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.1.0Condition: In cross tenant CMEK scenario, https://learn.microsoft.com/en-us/azure/storage/common/customer-managed-keys-configure-cross-tenant-new-account?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json&bc=%2Fazure%2Fstorage%2Fblobs%2Fbreadcrumb%2Ftoc.json&tabs=azure-portal
Detailed use case I asked in Microsoft QA platform: https://learn.microsoft.com/en-us/answers/questions/1663980/how-to-get-key-info-from-other-tenant
I cannot get the key. Return unauthorized message:
Expect to have Key information returned.
Reproduce: Just like the link I put above.
NOTE: