Azure / azure-storage-fuse

A virtual file system adapter for Azure Blob storage
Other
658 stars 206 forks source link

Security: Support `az login` authentication #1423

Closed letmaik closed 4 months ago

letmaik commented 4 months ago

blobfuse only supports managed identity as keyless authentication method. During development, it is common that the account key or SAS token methods are used. Developers tend to use those methods because there is either no control over the managed identity of VMs, or because blobfuse is used locally outside Azure, for example in WSL.

I propose that Azure CLI login is added as authentication method.

This is quickly becoming critical as key-based authentication is being disabled on storage accounts across organisations to improve their security posture.

rajsshah86 commented 4 months ago

@letmaik : New release blobfuse2-2.3.0 supports this . I have been using it now from last week.

souravgupta-msft commented 4 months ago

@rajsshah86, thanks for pointing it out and confirming that it is working for your scenario.

@letmaik, you can use the login mode as azcli in your config file under azstorage section.