Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Storage account name collisions are becoming too likely #3862

Closed
SvenAelterman opened this issue Feb 29, 2024 · 3 comments
Closed

Storage account name collisions are becoming too likely #3862

SvenAelterman opened this issue Feb 29, 2024 · 3 comments
Labels
breaking-change PR contains a breaking change that needs to be highlighted or documented bug Something isn't working deployment terraform Pull requests that update Terraform code

Comments

@SvenAelterman
Copy link
Collaborator

Describe the bug
With only 4 hexadecimal digits to create uniqueness, storage account names are seeing increasing collisions.

Steps to reproduce

  1. Create workspace is a luck of the draw.

Azure TRE release version (e.g. v0.14.0 or main): any

Deployed Azure TRE components - click the (i) in the UI: n/a

Backwards compatibility is going to be a significant issue to work around for existing workspaces and possibly (third-party) code that has a dependency on the current naming structure.

Additional entropy can be added by including the TRE ID in the storage account name:

stgws<tre_id>ws<ws_short_id>

This would be maximally 5 + 12 + 2 + 4 = 23 characters, which is within the limits of storage account names (24 characters).

This method would avoid adding randomness to ensure that services that need to leverage the storage account can deterministically create the name.

@SvenAelterman SvenAelterman added bug Something isn't working breaking-change PR contains a breaking change that needs to be highlighted or documented deployment terraform Pull requests that update Terraform code labels Feb 29, 2024
@SvenAelterman
Copy link
Collaborator Author

Thought: if randomness should be added instead of the TRE ID, then perhaps a tag can be used to identity the storage account for what it is. But I am not sure if TF could retrieve an existing resource by type + tag name/value pair. I know Bicep couldn't do it.

@marrobi
Copy link
Member

marrobi commented Feb 29, 2024

Reopening #2893, was closed in error.

@marrobi
Copy link
Member

marrobi commented Feb 29, 2024

Closing as duplicate, lets discuss in the other issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
breaking-change PR contains a breaking change that needs to be highlighted or documented bug Something isn't working deployment terraform Pull requests that update Terraform code
Projects
None yet
Development

No branches or pull requests

2 participants