I hope this is the right list; I wasn't sure whether to post here or to the
HDFS list.

I am using hadoop-azure version 3.3.1. I have a service deployed to Azure
on an App Service Plan. When using MsiTokenProvider as the authentication
mechanism, I am not able to authenticate. The root of this issue is that
the way one gets a token in an App Service Plan is different from a regular
Azure VM (see here:
https://dev.to/stratiteq/managed-identity-how-it-works-behind-the-scenes-co4
).

Currently MsiTokenProvider requests a token using IMDS, but this will not
work if it is doing so from an App Service Plan because the endpoint, and
the expected headers and query-parameter values are entirely different. A
workaround I am investigating is using a custom access token provider, but
it would be nice if this came out of the box with hadoop-azure (or at least
a way to tell hadoop-azure to use the token endpoint instead of IMDS when
in an App Service Plan).

Vivin
-- 
*[vivin.net <http://vivin.net> :: github <http://github.com/vivin> ::
linkedin <https://www.linkedin.com/in/vivin>]*

Reply via email to