Azure / azure-storage-fuse

A virtual file system adapter for Azure Blob storage
Other
658 stars 206 forks source link

Unable to mount blob storage from peered vnet and private link #1421

Closed vahsek300501 closed 3 months ago

vahsek300501 commented 4 months ago

Which version of blobfuse was used?

blobfuse2 version 2.3.0

Which OS distribution and version are you using?

Ubuntu 20.04.6 LTS

If relevant, please share your mount command.

blobfuse2 mount /mnt/superbenchmount/ --config-file /root/config.yaml --foreground &

What was the issue encountered?

I have a virtual network(vnet-1). I have created a storage account and connected it to a vnet-1 using private link. The DNS for the private link exists and have a valid entry for the storage account. I then created a second virtual network (vnet-2) and peered the vnet-2 with vnet-1. I generated the SAS token for the storage account (which is valid for 90 days). I created an Azure Linux VM in vnet-2. I tried to a blob in the storage account to the vm but it is giving authentication error. The following is the config file I have used:

image

The following is the error that I am getting

image

The SAS token is valid as I am able to upload and download files from the blob storage using the sas-token and curl command

Please help!!!

Have you found a mitigation/solution?

Please share logs if available.

image

shyamari87 commented 4 months ago

Having Similar issue in AKS, inspite of identity having the "Storage Blob data Contributor Role"

souravgupta-msft commented 4 months ago

Hi, can you please enable debug level logging in your config and share the debug logs. You can redact your storage account name in the logs.

The SAS token is valid as I am able to upload and download files from the blob storage using the sas-token and curl command

Please share the curl command as well. Kindly redact the account name and SAS.

souravgupta-msft commented 4 months ago

@vahsek300501, please share the above info. We will close the issue if there is no activity by the end of next week.

vibhansa-msft commented 3 months ago

Closing as there is no update on this.