tustvold commented on issue #5115: URL: https://github.com/apache/arrow-rs/issues/5115#issuecomment-1823680286
It looks like this should be supported by https://docs.rs/object_store/latest/object_store/azure/struct.MicrosoftAzureBuilder.html. You will need to specify the following: * https://docs.rs/object_store/latest/object_store/azure/struct.MicrosoftAzureBuilder.html#method.with_tenant_id * https://docs.rs/object_store/latest/object_store/azure/struct.MicrosoftAzureBuilder.html#method.with_client_id * https://docs.rs/object_store/latest/object_store/azure/struct.MicrosoftAzureBuilder.html#method.with_federated_token_file Or alternatively these can be specified as environment variables: * AZURE_TENANT_ID * AZURE_CLIENT_ID * AZURE_FEDERATED_TOKEN_FILE These values should correspond to the service account annotations - https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview?tabs=dotnet#service-account-annotations There might be a nicer way to project these in, AWS EKS has an admission hook that automatically sets some environment variables, but setting them manually may be good enough to prove it works first -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
