Skip to content

[FILEBEAT] - [ABS INPUT] - Add support for Azure managed identity Authentication #47317

@nmr

Description

@nmr

I would like to use the Filebeat daemon with the "AzureBlobStorage Input" module in my project. Unfortunately the project only supports a few authentication methods (including OAuth and SAS tokens). Those methods require generating tokens or creating additional identities (Service Principal Names). I would like to use the native identity of my Azure machine/container (managed identity). The Go SDK libraries provided by Microsoft natively support this functionality. Description here

Adding this capability would allow use of native identities for Azure resources (Azure Functions, Web Apps, Virtual Machines, AKS and others). It will increase security and simplify assigning RBAC permissions.

Please implement ManagedIdentityCredential() in this module. It could work by adding an extra switch in the configuration, e.g. auth.ManagedIdentityCredential = true , which uses the Microsoft SDK to load a token for the managed identity.

Metadata

Metadata

Assignees

No one assigned

    Labels

    needs_teamIndicates that the issue/PR needs a Team:* label

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions