-
Notifications
You must be signed in to change notification settings - Fork 808
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
BlobService check requires Storage Account Owner permissions #783
Labels
Comments
We had the same problem when using the health checks in an enterprise context. The account used by our application does not have the storage account owner permission, but we would like to perform the health check. |
Nisden
pushed a commit
to Nisden/AspNetCore.Diagnostics.HealthChecks
that referenced
this issue
Jul 19, 2021
6 tasks
Any idea when this will be merged, the PR looks good? |
Nisden
pushed a commit
to Nisden/AspNetCore.Diagnostics.HealthChecks
that referenced
this issue
Feb 16, 2022
Nisden
pushed a commit
to Nisden/AspNetCore.Diagnostics.HealthChecks
that referenced
this issue
Feb 17, 2022
This was referenced Aug 17, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Make the call to Get Blob Service Properties optional - perhaps based on the Options object used in this check
As currently implemented this line
AspNetCore.Diagnostics.HealthChecks/src/HealthChecks.AzureStorage/AzureBlobStorageHealthCheck.cs
Line 44 in a508476
Seems to require a high level of authorisation - according to the ms docs it needs storage account owner role - https://docs.microsoft.com/en-us/rest/api/storageservices/get-blob-service-properties#authorization
In my case I was looking to limit the necessary permissions for my app to just those required to access the blob container but adding this health check means I need to grant excessive permissions (imho :))
The text was updated successfully, but these errors were encountered: