v.24.3Experimental Feature

Use Managed Identity for Azure Blob Storage Backups and Prevent Container Creation Errors

Use managed identity for backups IO when using Azure Blob Storage. Add a setting to prevent ClickHouse from attempting to create a non-existent container, which requires permissions at the storage account level. #61785 (Daniel Pozo Escalona).
Added support for using managed identity authentication for backup input/output operations with Azure Blob Storage and a new setting to disable automatic container creation.

Why it matters

This feature addresses the need to authenticate with Azure Blob Storage using managed identities instead of access keys, improving security and ease of management. Additionally, it allows users to prevent ClickHouse from attempting to create non-existent containers, which can require elevated permissions at the storage account level, thus avoiding permission issues during backups.

How to use it

To use managed identity for Azure Blob Storage backups, configure the backup settings to enable managed identity authentication. To disable container creation, set the appropriate configuration flag that prevents ClickHouse from creating containers automatically.