what is the oauth-token-path used for?

[casimir-dus]

Hey,

so I'm trying to configure blobfuse2 to use a service principal instead of SAS, in order to stay within msfts best practices regarding IAM in storage accounts.

The base config gives following parameters for SPN:

  tenantid: <storage account tenant id for SPN>
  clientid: <storage account client id for SPN>
  clientsecret: <storage account client secret for SPN>
  oauth-token-path: <path to file containing the OAuth token>

Why and for what is a file needed for the OAuth token?
I did not find anyone who configured this parameter, and don't know what to put there.

I got my tenant id, my client id and my client secret.
This post also specified auth-resource.
This param is also listed in the environment variable documentation.

Can anyone provide some guidance on how to setup Blobfuse2 with Service Principals?

[vibhansa-msft]

These are all exhaustive configs required for fine tuning. For a regular use-case you dont need to provide everything unless you are in a specialised environment. Just provide the necessary SPN config listed below and it will work just fine:
tenantid:
clientid:
clientsecret:

[casimir-dus]

Thank you, I actually got it working.

Could you update the documentation / the baseConfig.yaml adding this information?
Maybe we can avoid this confusion in the future.

[vibhansa-msft]

What kind of help string you want in baseCofig. Something saying all configs are not mandatory?

[casimir-dus]

yes, maybe an (optional, used for doing XYZ) would be nice.

[simonfelding]

@vibhansa-msft this would be great.