Support for Secret-less Azure Managed Identity in Python Delta-Sharing Client #633
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Add Support for Azure Managed Identity in Python Delta-Sharing Client.
sample share profile file for managed-identity:
Note to reviewer please read bellow:
What is Azure Managed Identity?
Azure Managed Identity allows applications running on Azure compute resources (e.g., Azure Virtual Machines) to access Azure services without the need for managing credentials explicitly. The identity is automatically provisioned by Azure infrastructure, eliminating the need for hardcoded secrets.
To obtain an access token, the application can call a specific internal endpoint available only within the Azure VM environment:
Example Response
This token can then be used by the client to authenticate against Azure services and if delta-sharing server supports accepting this token delta-sharing client can authenticate against the server.
For more details, refer to the official Azure documentation.
How this code is constructed
The code is constructed by following a similar pattern established for the OAuth client credential flow. It subclasses
AuthCredentialProvider
to implement the managed-identity auth provider.Future Work