-
Notifications
You must be signed in to change notification settings - Fork 2.3k
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Summary
Follows #41383. Add Account Name + Account Key as an alternative authentication method for Azure Blob Storage batch exports. Currently only Connection String auth is supported (#43977, #44696).
Why
Account + Key auth gives users more flexibility: easier key rotation without rebuilding connection strings, cleaner custom endpoint configuration, and aligns with how we'd eventually support Managed Identity.
Scope
Backend:
- Update
AzureBlobIntegrationto storeauth_methodin config and supportaccount_name+account_keyinsensitive_config - Update
AzureBlobConsumerto useBlobServiceClient(account_url, credential)when account key auth is used - Update
AzureBlobContainerTestStepto support validating account key auth
Frontend:
- Add auth type selector to
AzureBlobSetupModal - Conditionally show connection string OR account name + account key fields
Tests:
- Parameterize existing tests to cover both auth methods
- Test locally using Azurite emulator
Acceptance Criteria
- Can create Azure Blob export using Account Name + Key
- Connection String auth still works (no regression)
- Connection test validates Account + Key before saving
- Account key stored encrypted via Integration model
- Unit and integration tests cover both auth methods
References
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request