Merge pull request kubernetes-sigs#5181 from nojnhuh/azwi-key-access

disable shared key access on AZWI storage accounts
nawazkh · Oct 15, 2024 · 68b882c · 68b882c
2 parents adb583a + 090d4bb
commit 68b882c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scripts/kind-with-registry.sh b/scripts/kind-with-registry.sh
@@ -105,7 +105,7 @@ function checkAZWIENVPreReqsAndCreateFiles() {
 
     if ! az storage account show --name "${AZWI_STORAGE_ACCOUNT}" --resource-group "${AZWI_RESOURCE_GROUP}" > /dev/null 2>&1; then
       echo "Creating storage account '${AZWI_STORAGE_ACCOUNT}' in '${AZWI_RESOURCE_GROUP}'"
-      az storage account create --resource-group "${AZWI_RESOURCE_GROUP}" --name "${AZWI_STORAGE_ACCOUNT}" --output none --only-show-errors --tags creationTimestamp="${TIMESTAMP}" jobName="${JOB_NAME}" buildProvenance="${BUILD_PROVENANCE}"
+      az storage account create --resource-group "${AZWI_RESOURCE_GROUP}" --name "${AZWI_STORAGE_ACCOUNT}" --allow-shared-key-access=false --output none --only-show-errors --tags creationTimestamp="${TIMESTAMP}" jobName="${JOB_NAME}" buildProvenance="${BUILD_PROVENANCE}"
       until az storage account show --name "${AZWI_STORAGE_ACCOUNT}" --resource-group "${AZWI_RESOURCE_GROUP}" > /dev/null 2>&1; do
         sleep 5
       done