Skip to content

Commit 4716a8d

Browse files
authored
docs: use azure storge static web serving rather than public access (#1635)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
1 parent 69b7641 commit 4716a8d

File tree

2 files changed

+9
-5
lines changed

2 files changed

+9
-5
lines changed

docs/book/src/development.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -53,9 +53,11 @@ Azure blob storage will be used to host the OIDC discovery document and JWKS. Ho
5353

5454
```bash
5555
export AZURE_STORAGE_ACCOUNT="azwi$(openssl rand -hex 4)"
56-
export AZURE_STORAGE_CONTAINER="oidc-test"
56+
# This $web container is a special container that serves static web content without requiring public access enablement.
57+
# See https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-static-website
58+
AZURE_STORAGE_CONTAINER="\$web"
5759
az storage account create --resource-group "${RESOURCE_GROUP}" --name "${AZURE_STORAGE_ACCOUNT}"
58-
az storage container create --name "${AZURE_STORAGE_CONTAINER}" --public-access container
60+
az storage container create --name "${AZURE_STORAGE_CONTAINER}"
5961
```
6062

6163
Generate and upload the OIDC discovery document:

docs/book/src/installation/self-managed-clusters/oidc-issuer/discovery-document.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,11 @@ export LOCATION="westus2"
1414
az group create --name "${RESOURCE_GROUP}" --location "${LOCATION}"
1515

1616
export AZURE_STORAGE_ACCOUNT="oidcissuer$(openssl rand -hex 4)"
17-
export AZURE_STORAGE_CONTAINER="oidc-test"
18-
az storage account create --resource-group "${RESOURCE_GROUP}" --name "${AZURE_STORAGE_ACCOUNT}" --allow-blob-public-access true
19-
az storage container create --name "${AZURE_STORAGE_CONTAINER}" --public-access blob
17+
# This $web container is a special container that serves static web content without requiring public access enablement.
18+
# See https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-static-website
19+
AZURE_STORAGE_CONTAINER="\$web"
20+
az storage account create --resource-group "${RESOURCE_GROUP}" --name "${AZURE_STORAGE_ACCOUNT}"
21+
az storage container create --name "${AZURE_STORAGE_CONTAINER}"
2022
```
2123

2224
### 2. Generate the discovery document

0 commit comments

Comments
 (0)