Skip to content

Commit db03c5f

Browse files
author
Anuj Modi
committed
Update ABFS.md
1 parent f643e3e commit db03c5f

File tree

1 file changed

+22
-3
lines changed
  • hadoop-tools/hadoop-azure/src/site/markdown

1 file changed

+22
-3
lines changed

hadoop-tools/hadoop-azure/src/site/markdown/abfs.md

Lines changed: 22 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -311,10 +311,11 @@ driven by them.
311311

312312
1. With the storage account's authentication secret in the configuration:
313313
"Shared Key".
314-
1. Using OAuth 2.0 tokens of one form or another.
315-
1. Deployed in-Azure with the Azure VMs providing OAuth 2.0 tokens to the application,
314+
2. Using OAuth 2.0 tokens of one form or another.
315+
3. Deployed in-Azure with the Azure VMs providing OAuth 2.0 tokens to the application,
316316
"Managed Instance".
317-
1. Using Shared Access Signature (SAS) tokens provided by a custom implementation of the SASTokenProvider interface.
317+
4. Using Shared Access Signature (SAS) tokens provided by a custom implementation of the SASTokenProvider interface.
318+
2. By directly configuring a fixed Shared Access Signature (SAS) token in the account configuration settings files.
318319

319320
What can be changed is what secrets/credentials are used to authenticate the caller.
320321

@@ -625,6 +626,24 @@ tokens by implementing the SASTokenProvider interface.
625626

626627
The declared class must implement `org.apache.hadoop.fs.azurebfs.extensions.SASTokenProvider`.
627628

629+
*Note:* When using a token provider implementation that provides a User Delegation SAS Token or Service SAS Token, some operations may be out of scope and may fail.
630+
631+
### Fixed Shared Access Signature (SAS) Token
632+
633+
A Shared Access Signature Token can be directly configured in the account settings file. This should ideally be used for an Account SAS Token, that can be fixed as a constant for an account.
634+
```xml
635+
<property>
636+
<name>fs.azure.account.auth.type</name>
637+
<value>SAS</value>
638+
</property>
639+
<property>
640+
<name>fs.azure.sas.fixed.token</name>
641+
<value>{SAS Token generated or obtained directly from public interfaces}</value>
642+
<description>Fixed SAS Token directly configured</description>
643+
</property>
644+
```
645+
*Note:* When `fs.azure.sas.token.provider.type` and `fs.azure.fixed.sas.token` are both configured, precedence will be given to the custom token provider implementation.
646+
628647
## <a name="technical"></a> Technical notes
629648

630649
### <a name="proxy"></a> Proxy setup

0 commit comments

Comments
 (0)