lakeFS icon indicating copy to clipboard operation
lakeFS copied to clipboard

Running lakeFS on AKS without passing credentials

Open nopcoder opened this issue 2 years ago • 5 comments

Support a way to deploy lakeFS with access to storage without passing key/secrets to the lakeFS container running inside AKS (Azure's Managed Kubernetes Service).

The current lakeFS implement doesn't work inside AKS cluster while configured with 'msi' (managed service identities) configured.

Based on https://docs.microsoft.com/en-us/azure/aks/operator-best-practices-identity, "Use Pod-managed Identities" will enable that.

Deploying AKS cluster based on https://docs.microsoft.com/en-us/azure/aks/operator-best-practices-identity#use-pod-managed-identities, lakefs fails to access the storage configured with user managed identity.

nopcoder avatar Mar 01 '22 13:03 nopcoder