如何在Azure DataLake上进行身份验证 [英] How to authenticate on Azure DataLake

问题描述

我要编写一个将在Azure Batch上运行的python代码.然后，该python代码将访问Azure数据湖以直接对其进行写入.如果我愿意以纯文本格式写下身份验证密钥，则可以轻松地向Azure Data Lake进行身份验证 将存储在Azure Batch中的代码.

I am going to write a python code that I will run on Azure Batch. That python code will then access Azure Data Lake to write to it directly. I can easily authenticate to Azure Data Lake if I am willing to write down authentication secret in plain text in the code that will reside in Azure Batch. 

我认为不允许在代码中写入秘密值.自动验证的最佳方法是什么?

I will argue writing secret values in the code is not allowed. What is the best way to automatically authenticate?

我可以使用Key Vault，但随后我必须向Key Vault进行身份验证.我如何自动做到这一点?

I can use Key Vault but then I have to authenticate to Key Vault. How do I do that automatically?

有什么想法吗?

推荐答案

Azure Batch内置用于管理身份验证的一种方法是允许您将证书附加到池中，然后将其添加到池中的每个节点.

One way Azure Batch has built in to manage authentication is allowing you to attach a Certificate to a pool, which then gets added to each node in the pool.

为此，您需要使用证书API( https://docs.microsoft.com/zh-cn/rest/api/batchservice/pool/add# request-body). 

To do this you would need to create the certificate with the Certificate API(https://docs.microsoft.com/en-us/rest/api/batchservice/certificate). Then you can add a reference to that certificate on your Azure Batch Pool(https://docs.microsoft.com/en-us/rest/api/batchservice/pool/add#request-body). 

这篇关于如何在Azure DataLake上进行身份验证的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！