DurableFunctionsMonitor icon indicating copy to clipboard operation
DurableFunctionsMonitor copied to clipboard

Does DFM_ALTERNATIVE_CONNECTION_STRING_* Support Identity connection ?

Open MasterKuat opened this issue 3 years ago • 5 comments

Hi,

I try to use a standalone DFM installation to monitor 4 differents functions. Set DFM_ALTERNATIVE_CONNECTION_STRING_* for all 4 works well if I set the full connection string with key and so on but is there a way to use DFM identity to connect other storage account ?

Thanks

MasterKuat avatar Sep 30 '22 06:09 MasterKuat

Hi @MasterKuat , No, identity-based connections are not currently supported for alternative storages (DFM_ALTERNATIVE_CONNECTION_STRING_*).

I suggest you either store those connection strings in Key Vault (and use the @Microsoft.KeyVault() references), or deploy separate DfMon instances for each storage, or just use DfMon in form of VsCode (or GitHub Codespaces) extension.

scale-tone avatar Sep 30 '22 10:09 scale-tone

Hi @scale-tone ,

Thanks for your answer. My initial guess was good.

For operationnal purposes, I wish to use only 1 instance of (your great) DfMon, could it be added ? As Managed Identity seems to be The Future, sounds to me like a good idea.

MasterKuat avatar Sep 30 '22 10:09 MasterKuat

Hi @MasterKuat from my point of view but I could be wrong support for managed identity is related to the migration to Azure.Storage for durable task. There is a PR for this Azure/durabletask#763 and it should solve part of the problem but @scale-tone, I think the same move should be done here for all usage of Microsoft.WindowsAzure.Storage

bhugot avatar Nov 23 '22 22:11 bhugot

Hi @bhugot, I'm not sure for the PR as DurableFunction (which use DurableTask) already support managed identity for storage account.

MasterKuat avatar Nov 24 '22 05:11 MasterKuat

Ok my bad

bhugot avatar Nov 24 '22 06:11 bhugot