nextflow icon indicating copy to clipboard operation
nextflow copied to clipboard

Azure Batch Executor : support for Service Principal Auth

Open KrisJanssen opened this issue 3 years ago • 1 comments

Usage scenario

Azure Batch supports multiple usage styles: A Batch Service can have a public endpoint or a private one and nodes can be provisioned in a Batch managed subscription or in the user subscription.

When wanting to use (more secure) private endpoints and user subscription provisioning, key based authentication is not available. AAD Service Principal authentication must be used as per : https://docs.microsoft.com/en-us/azure/batch/batch-aad-auth

Suggest implementation

To make NextFlow more usable in these scenarios an option should be added to choose between either key based or SP based authentication.

KrisJanssen avatar Jan 01 '22 00:01 KrisJanssen

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Jun 11 '22 03:06 stale[bot]

Hi @KrisJanssen

Thanks for raising this request - I'm looking into this and would really appreciate if you could please share further information on your use case w.r.t Azure Batch account settings such as System Managed Identity as well as Pool level settings specific to your use-case.

abhi18av avatar Aug 19 '22 11:08 abhi18av

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Jan 21 '23 03:01 stale[bot]

@abhi18av has not this support implemented by https://github.com/nextflow-io/nextflow/pull/3132 ?

pditommaso avatar Jan 23 '23 15:01 pditommaso

Yes, this use-case is covered in the PR 👍

abhi18av avatar Jan 23 '23 20:01 abhi18av

Cool, let's close this

pditommaso avatar Jan 23 '23 20:01 pditommaso

Thanks @pditommaso , @abhi18av !!

KrisJanssen avatar Mar 01 '23 16:03 KrisJanssen

All credits to @abhi18av

pditommaso avatar Mar 01 '23 17:03 pditommaso