Skip to content

Conversation

@moizpgedge
Copy link

Summary:
Adds support for Azure Managed Identities authentication, allowing pgBackRest to authenticate with Azure Storage without explicit credentials.
Changes:
New authentication type: Added auto option for repo-azure-key-type to enable automatic authentication via Azure Managed Identities

  • Configuration updates: Made repo-azure-key optional when using auto authentication type
  • Implementation: Added token retrieval from Azure IMDS endpoint with automatic refresh
  • Testing: Added Docker-based integration tests
  • Documentation: Updated help text and configuration docs

Technical Details:

  1. Uses Azure IMDS endpoint (169.254.169.254/metadata/identity/oauth2/token) to retrieve access tokens
  2. Tokens are cached and automatically refreshed before expiration
  3. Updated Azure Storage API version to 2024-08-04

mmols and others added 4 commits December 1, 2025 23:12
- Removed AZURE_KEY and AZURE_KEY_TYPE build-time ARGs
- Azure configuration now only done at runtime via environment variables
- Fixes Docker BuildKit security warnings about sensitive data in ARGs
@moizpgedge moizpgedge requested a review from mmols December 2, 2025 15:39
@moizpgedge moizpgedge force-pushed the azure-managed-identities branch 3 times, most recently from c7ef3bb to ed2630b Compare December 3, 2025 21:19
@moizpgedge moizpgedge closed this Dec 4, 2025
@moizpgedge moizpgedge deleted the azure-managed-identities branch December 4, 2025 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants