Skip to main content

Azure + GoLang SDK : Authenticating Part-1

My personal notes on how to authenticate to Azure in the GoLang code. 



The auth package lives at "github.com/Azure/go-autorest/autorest/azure/auth"
In the above package, at the moment I have explored below two functions:

  • NewAuthorizerFromFile method
  • NewAuthorizerFromEnvironment method



NewAuthorizerFromFile

I prefer using this method when doing local development but it is not suited for Production since the file containing auth metadata lives in the file system.


The function definition looks like: 


So, this method takes a baseURI of the ARM Endpoint and then it looks for an environment variable AZURE_AUTH_LOCATION.



The value of this env var is pointing to a file containing required metadata for authenticating to Azure e.g. SubscriptionId, ClientID etc.


The struct where the JSON file is unmarshaled looks like below, make a note that all these fields are read from the JSON file:



Note - The above metadata file can be created using Az CLI and stored on the filesystem, using below:

az ad sp create-for-rbac —sdk-auth > azureauth.json

The second method will be covered in the Part 2 of the post.

Popular posts from this blog

Test connectivity via a specific network interface

Recently while working on a Private cloud implementation, I came across a scenario where I needed to test connectivity of a node to the AD/DNS via multiple network adapters.  Many of us would know that having multiple network routes is usually done to take care of redundancy. So that if a network adapter goes down, one can use the other network interface to reach out to the node. In order to make it easy for everyone to follow along, below is an analogy for the above scenario: My laptop has multiple network adapters (say Wi-Fi and Ethernet) connected to the same network. Now how do I test connectivity to a Server on the network only over say Wi-Fi network adapter?

PowerShell + SCCM : Run CM cmdlets remotely

Today I saw a tweet about using implicit remoting to load the Configuration Manager on my machine by Justin Mathews . It caught my eye as I have never really tried it, but theoretically it can be done. Note - The second tweet says "Cannot find a provider with the name CMSite", resolution to which is in the Troubleshooting section at the end.

PowerShell : Trust network share to load modules & ps1

Problem Do you have a central network share, where you store all the scripts or PowerShell modules ? What happens if you try to run the script from a network share ? or if you have scripts (local) which invoke scripts or import PowerShell modules stored on this network share ? Well you would see a security warning like below (Note - I have set execution policy as 'Unrestricted' not 'bypass' here): Run a .ps1 from the network share Well this is a similar warning, which you get when you download scripts from Internet. As the message says run Unblock-File cmdlet to unblock the script and then run it, let's try it.