Use private connection to Azure Blob Storage

[aechegoyan17]

Hi,

I would like to use Azure Blob Storage to store artifacts, but due to company policies I cannot use public internet connections so I am trying to use private links.
This doesn't seem possible at the moment as it currently dynamically adds the word "blob" before the specified realm (e.g. core.windows.net) somewhere, resulting in "xxx.blob.core.windows.net" instead of "xxx.privatelink.blob.core.windows.net" which is what I need.
Here is an example configuration:

Causing the following error, due to "blob" word being added before:

I tried using the Distribution middleware feature but doesn't seem to work. Here is their documentation:
https://distribution.github.io/distribution/storage-drivers/middleware/rewrite/

Thank you

[MinerYang]

Would you try to disableredirect:true

harbor-helm/values.yaml

Line 185 in 44f6a8f

disableredirect: false

[EduGoma]

Hello,
I have changed it to true disableredirect: true and it still modifies the url.
panic: Put "https://harborstorage.**blob**.privatelink.blob.core.windows.net/harborimages?restype=container"

configuration:

      disableredirect: true
    # Specify the "caBundleSecretName" if the storage service uses a self-signed certificate.
    # The secret must contain keys named "ca.crt" which will be injected into the trust store
    # of registry's containers.
    # caBundleSecretName:

    # Specify the type of storage: "filesystem", "azure", "gcs", "s3", "swift",
    # "oss" and fill the information needed in the corresponding section. The type
    # must be "filesystem" if you want to use persistent volumes for registry
    type: azure
    filesystem:
      rootdirectory: /storage
      #maxthreads: 100
    azure:
      accountname: "harborstorage"
      accountkey: ""
      container: harborimages
      realm: privatelink.blob.core.windows.net  
      # # To use existing secret, the key must be AZURE_STORAGE_ACCESS_KEY
      existingSecret: ""

thanks for your help

[aechegoyan17]

Sorry for the late reply, I have been quite busy.

I tried the redirect setting without success, but I think it won't work anyway due to it actings like a CDN, where Azure Blob Storage answers the request directly.

[github-actions]

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

[totola-clx]

Please fix this issue.
I think a lot of people would benefit from managing both private blob storage and custom URIs for storage accounts.
We are in the same scenario as the OP and currently this problem prevented us to use a storage account for saving files.
I confirm that the option disableredirect: false is not solving the problem.