Skip to content

Document Azure sovereign cloud DNS suffix configuration #242

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mhotan wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Document Azure sovereign cloud DNS suffix configuration #242

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d68759e
Document Azure sovereign cloud DNS suffix configuration
mhotan Feb 19, 2026
0f232ff
Simplify Azure sovereign cloud config to single AZURE_STORAGE_DNS_SUF…
mhotan Feb 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions charts/dataplane/values.azure.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -91,6 +91,14 @@ global:
# Note: Key Vault must exist with appropriate access policies
AZURE_KEY_VAULT_URI: ""

# 13. AZURE_STORAGE_DNS_SUFFIX - (OPTIONAL) Azure Storage DNS suffix
# Default: "dfs.core.windows.net" (Azure Public Cloud, Data Lake Storage Gen2)
# Override for sovereign clouds:
# Azure China: "dfs.core.chinacloudapi.cn"
# Azure Government: "dfs.core.usgovcloudapi.net"
# Note: Only set this if you are NOT using Azure Public Cloud.
# AZURE_STORAGE_DNS_SUFFIX: "dfs.core.windows.net"

# ----------------------------------------------------------------------------
# SECTION 2: Core Identity Configuration (REQUIRED)
# ----------------------------------------------------------------------------
Expand All @@ -110,6 +118,11 @@ storage:
provider: custom
bucketName: '{{ .Values.global.METADATA_CONTAINER }}'
enableMultiContainer: true
# (Optional) Override the metadata prefix URL for sovereign clouds or custom domains.
# When set, this controls both rawoutput-prefix and metadataBucketPrefix.
# Default (Azure Public): "abfs://<container>@<account>.dfs.core.windows.net"
# Example for Azure China:
# metadataPrefix: "abfs://{{ .Values.global.METADATA_CONTAINER }}@{{ .Values.global.AZURE_STORAGE_ACCOUNT }}.dfs.core.chinacloudapi.cn"
Copy link
Copy Markdown
Contributor Author

@mhotan mhotan Feb 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we can do work here to make it so this config use {{ .Values.global.AZURE_STORAGE_DNS_SUFFIX }}. Potentially a missing tpl somewhere.


# Custom storage configuration using stow with Azure backend
custom:
Expand All @@ -123,6 +136,11 @@ storage:
# Leave key empty to use Workload Identity / Managed Identity authentication
# For key-based auth, provide the storage account access key
# key: ""
# (Optional) Override the Azure Storage DNS suffix for sovereign clouds.
# Default (Azure Public): dfs.core.windows.net
# Azure China: dfs.core.chinacloudapi.cn
# Azure Government: dfs.core.usgovcloudapi.net
# configDomainSuffix: '{{ .Values.global.AZURE_STORAGE_DNS_SUFFIX }}'

# ----------------------------------------------------------------------------
# SECTION 4: Workload Identity (REQUIRED for Azure)
Expand Down Expand Up @@ -207,6 +225,9 @@ config:
operator:
clusterData:
# Azure Blob Storage path format (ABFS protocol for Data Lake Storage Gen2)
# For sovereign clouds, replace .dfs.core.windows.net with the appropriate suffix
# (e.g., .dfs.core.chinacloudapi.cn for Azure China)
# or use AZURE_STORAGE_DNS_SUFFIX global: "abfs://{{.Values.global.METADATA_CONTAINER}}@{{.Values.global.AZURE_STORAGE_ACCOUNT}}.{{.Values.global.AZURE_STORAGE_DNS_SUFFIX}}"
metadataBucketPrefix: "abfs://{{.Values.global.METADATA_CONTAINER}}@{{.Values.global.AZURE_STORAGE_ACCOUNT}}.dfs.core.windows.net"
org:
namespaceTemplate: '{{`{{ domain }}`}}'
Expand Down
4 changes: 3 additions & 1 deletion charts/dataplane/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1670,7 +1670,9 @@ storage:
# -- Override the metadata prefix URL used for constructing object storage paths (e.g. rawoutput-prefix,
# -- metadataBucketPrefix). When set, this takes precedence over the auto-generated prefix based on the
# -- storage provider. Useful for custom providers where the default s3:// scheme is incorrect.
# -- Example for Azure: "abfs://my-container@mystorageaccount.dfs.core.windows.net"
# -- Example for Azure Public: "abfs://my-container@mystorageaccount.dfs.core.windows.net"
# -- Example for Azure China: "abfs://my-container@mystorageaccount.dfs.core.chinacloudapi.cn"
# -- Example for Azure Government: "abfs://my-container@mystorageaccount.dfs.core.usgovcloudapi.net"
metadataPrefix: ""
# -- Define custom configurations for the object storage. Only used if the provider is set to "custom".
custom: { }
Expand Down
Loading