Hello there.
I am building an Umbraco 13 project and I need to connect Blob Storage on Azure.
The Umbraco image is sitting inside an App Service and is already connected to Blob Storage using AccessKey.
But I have been requested to remove the access key from the code, and connect using Managed Identity.
The IT guy said he had set all the needed settings in the azure, and that the app service can connect to the Blob Storage using Managed Identity.
Now I need to figure it in the code.
This is the code I have so far:
services.AddUmbraco(_env, _config)
.SetServerRegistrar<SchedulingPublisherServerRoleAccessor>()
.AddBackOffice()
.AddWebsite()
.AddComposers()
.AddAzureBlobMediaFileSystem(options =>
{
options.ContainerName = _config["AzureBlobStorageSettings:ContainerName"];
options.ConnectionString = _config.GetConnectionString("AzureBlobStorage");
options.TryCreateBlobContainerClientUsingUri(_ =>
new BlobContainerClient(
new Uri($"{_config.GetConnectionString("AzureBlobStorageUrl")}/{_config["AzureBlobStorageSettings:ContainerName"]}"),
new ManagedIdentityCredential()));
})
ContainerName is the name of the container,
ConnectionString is “DefaultEndpointsProtocol=https;AccountName={STORAGE-ACCOUNT-NAME}};AccountKey=;EndpointSuffix=core.windows.net”,
Uri is: “https://{STORAGE-ACCOUNT-NAME}.blob.core.windows.net/{CONTAINER-NAME}”,
When I run the code locally I don’t need to get access to the blob storage, only when I publish the code to the development environment (sitting under an App Service in Azure).
Considering the IT guy configured everything as needed in Azure, what do I do wrong in my code?
These are the NuGets that I am using:
<ItemGroup>
<PackageReference Include="Diplo.GodMode" Version="13.1.0" />
<PackageReference Include="EntityFramework" Version="6.5.1" />
<PackageReference Include="HtmlAgilityPack" Version="1.11.61" />
<PackageReference Include="Microsoft.AspNetCore.Authentication.MicrosoftAccount" Version="8.0.5" />
<PackageReference Include="Azure.Identity" Version="1.13.2" />
<PackageReference Include="Azure.Security.KeyVault.Secrets" Version="4.5.0" />
<PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.22.0" />
<PackageReference Include="Our.Umbraco.TheDashboard" Version="13.0.1" />
<PackageReference Include="Serilog.Sinks.AzureBlobStorage" Version="3.3.1" />
<PackageReference Include="Umbraco.Community.Contentment" Version="5.0.1" />
<PackageReference Include="Umbraco.StorageProviders.AzureBlob" Version="13.1.0" />
<PackageReference Include="Serilog.Sinks.AzureBlobStorage" Version="4.0.5" />
<PackageReference Include="morelinq" Version="4.2.0" />
<PackageReference Include="Umbraco.Cms" Version="13.3.1" />
</ItemGroup>
Has anyone ever configured Umbraco 13 Blob Storage Managed Identity connection?
Thanks!