v.24.5New Feature

Support Azure Workload Identity Authentication for azureBlobStorage in ClickHouse

Official CH changelog text
Provide support for azureBlobStorage function in ClickHouse server to use Azure Workload identity to authenticate against Azure blob storage. If use_workload_identity parameter is set in config, workload identity is used for authentication. #57881 (Vinay Suryadevara).
Added support for the azureBlobStorage function in ClickHouse to authenticate using Azure Workload Identity when accessing Azure Blob Storage.

Why it matters

This feature enables ClickHouse to seamlessly authenticate against Azure Blob Storage using Azure Workload Identity, eliminating the need for explicit credentials and enhancing security by leveraging managed identities for Azure-hosted applications.

How to use it

In the ClickHouse server configuration, set the use_workload_identity parameter to true under the azureBlobStorage settings. This activates authentication via Azure Workload Identity as described in Azure's SDK documentation.

Related resources

PreviousNext