docs: add Azure Blob service principal authentication by Vaibhav-C-S · Pull Request #2592 · fluent/fluent-bit-docs

Vaibhav-C-S · 2026-06-01T09:55:51Z

This PR documents service principal authentication support for the Azure Blob output plugin.

It adds:

service_principal as a supported auth_type
tenant_id, client_id, and client_secret configuration parameters
a service principal authentication example using both YAML and classic config formats

Notes

Service principal authentication requires TLS. The service principal must have permission to write to the target storage account or container, such as the Storage Blob Data Contributor role.

Summary by CodeRabbit

Documentation
- Azure Blob connector docs now include Microsoft Entra ID service principal authentication alongside existing key and SAS options (default remains key).
- When service principal auth is selected, the guide clarifies required fields: tenant ID, client ID, and client secret.
- Added a dedicated service principal configuration section with example Fluent Bit setups for both YAML and CONF, including TLS settings.

Signed-off-by: Cheruvu.Sahithee.Vaibhav@ibm.com <Cheruvu.Sahithee.Vaibhav@ibm.com>

coderabbitai · 2026-06-01T09:56:05Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 680cddfd-af2d-4015-9ff0-291782bec291

📥 Commits

Reviewing files that changed from the base of the PR and between 4a0ea41 and 7687de1.

📒 Files selected for processing (1)

pipeline/outputs/azure_blob.md

✅ Files skipped from review due to trivial changes (1)

pipeline/outputs/azure_blob.md

📝 Walkthrough

Walkthrough

The Azure Blob connector documentation now includes service_principal as an auth_type, adds client_id, client_secret, and tenant_id as conditionally required fields, and provides a new service principal authentication section with YAML and CONF examples.

Changes

Service Principal Authentication Support

Layer / File(s)	Summary
Service principal auth configuration and examples `pipeline/outputs/azure_blob.md`	The configuration table adds `service_principal` support and new `client_id`, `client_secret`, and `tenant_id` rows with conditional mandatory guidance. A new section adds service principal authentication examples in YAML and CONF format.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Suggested labels

5.0.7

Suggested reviewers

patrick-stephens
cosmo0920

Poem

A rabbit found a brighter key,
For Azure docs and symmetry.
With client, secret, tenant too,
The YAML hops, the CONF hops through.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: adding Azure Blob service principal authentication documentation.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

coderabbitai

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@pipeline/outputs/azure_blob.md`:
- Line 163: Update the Azure Blob auth paragraph to explicitly require TLS when
using service principal credentials: state that when auth_type is set to
service_principal (and tenant_id, client_id, client_secret are provided) the tls
setting must be on/true to ensure secure communication; modify the sentence that
currently only shows the example so it unambiguously enforces tls=on for service
principal auth.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 8036ab68-a151-439d-b8aa-cc6ae073ab6f

📥 Commits

Reviewing files that changed from the base of the PR and between 82ab6af and 9c4fc45.

📒 Files selected for processing (1)

pipeline/outputs/azure_blob.md

patrick-stephens · 2026-06-01T13:17:11Z

Please resolve the DCO issue as that is a hard requirement for merge.

eschabell · 2026-06-01T15:27:40Z

@Vaibhav-C-S thanks for the docs PR for your matching code changes. As you can see it failed on DCO which is at least one commit not signed. If you open the DCO error with the 3 dots on the right, you can see how to fix this. On top of that you have some other AI suggestions you need to address.

All this needs to happen before we can review this PR.

Signed-off-by: Cheruvu.Sahithee.Vaibhav@ibm.com <Cheruvu.Sahithee.Vaibhav@ibm.com>

Vaibhav-C-S · 2026-06-01T15:55:12Z

@eschabell @patrick-stephens I have addressed the dco issue

Signed-off-by: Cheruvu.Sahithee.Vaibhav@ibm.com <Cheruvu.Sahithee.Vaibhav@ibm.com>

Signed-off-by: Eric D. Schabell <eric@schabell.org>

eschabell · 2026-06-27T11:48:59Z

@Vaibhav-C-S resolved the conflicts first, now working on the vale / lint issues and will review after that.

… Vale suggestions - Backtick `Entra` in Microsoft Entra ID references - Backtick `codec` in compress_blob description Applies to fluent#2592 Signed-off-by: Eric D. Schabell <eric@schabell.org>

eschabell · 2026-06-27T14:24:53Z

@coderabbitai review

coderabbitai · 2026-06-27T14:24:58Z

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

eschabell

@Vaibhav-C-S all good now, thanks for the docs PR! Waiting only on code PR merging.

Vaibhav-C-S · 2026-06-27T14:46:10Z

@eschabell Thank you for the help and for the review! I really appreciate it.

docs: add Azure Blob service principal authentication

17d6042

Signed-off-by: Cheruvu.Sahithee.Vaibhav@ibm.com <Cheruvu.Sahithee.Vaibhav@ibm.com>

Vaibhav-C-S requested review from a team and eschabell as code owners June 1, 2026 09:55

coderabbitai Bot reviewed Jun 1, 2026

View reviewed changes

Comment thread pipeline/outputs/azure_blob.md Outdated

Vaibhav-C-S mentioned this pull request Jun 1, 2026

out_azure_blob: add service principal auth fluent/fluent-bit#11889

Open

7 tasks

eschabell self-assigned this Jun 1, 2026

eschabell added dco DCO failing waiting-on-code-merge waiting-on-review Waiting on a review from mainteners labels Jun 1, 2026

eschabell added the waiting-for-user Waiting for user/contributors feedback or requested changes label Jun 1, 2026

add example

373748e

Signed-off-by: Cheruvu.Sahithee.Vaibhav@ibm.com <Cheruvu.Sahithee.Vaibhav@ibm.com>

Vaibhav-C-S force-pushed the azure-blob-service-principal-docs branch from 9c4fc45 to 373748e Compare June 1, 2026 15:53

Cheruvu.Sahithee.Vaibhav@ibm.com and others added 2 commits June 1, 2026 21:31

docs: address review comments

4a0ea41

Signed-off-by: Cheruvu.Sahithee.Vaibhav@ibm.com <Cheruvu.Sahithee.Vaibhav@ibm.com>

Merge branch 'master' into azure-blob-service-principal-docs

da34f18

Signed-off-by: Eric D. Schabell <eric@schabell.org>

eschabell removed dco DCO failing waiting-for-user Waiting for user/contributors feedback or requested changes labels Jun 27, 2026

docs: pipeline: outputs: azure_blob: wrap terms in backticks to clear…

7687de1

… Vale suggestions - Backtick `Entra` in Microsoft Entra ID references - Backtick `codec` in compress_blob description Applies to fluent#2592 Signed-off-by: Eric D. Schabell <eric@schabell.org>

eschabell approved these changes Jun 27, 2026

View reviewed changes

eschabell removed the waiting-on-review Waiting on a review from mainteners label Jun 27, 2026

Uh oh!

Conversation

Vaibhav-C-S commented Jun 1, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Notes

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jun 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Suggested labels

Suggested reviewers

Poem

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

patrick-stephens commented Jun 1, 2026

Uh oh!

eschabell commented Jun 1, 2026

Uh oh!

Vaibhav-C-S commented Jun 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

eschabell commented Jun 27, 2026

Uh oh!

eschabell commented Jun 27, 2026

Uh oh!

coderabbitai Bot commented Jun 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

eschabell left a comment

Choose a reason for hiding this comment

Uh oh!

Vaibhav-C-S commented Jun 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Vaibhav-C-S commented Jun 1, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jun 1, 2026 •

edited

Loading

Vaibhav-C-S commented Jun 1, 2026 •

edited

Loading

coderabbitai Bot commented Jun 27, 2026 •

edited

Loading