Skip to content

[Bug] Azure Vault does not work with https #60971

@Nj-kol

Description

@Nj-kol

Search before asking

  • I had searched in the issues and found no similar issues.

Version

4.0.3

What's Wrong?

I am trying to create an Azure vault in Doris for the purpose of decoupled mode

CREATE STORAGE VAULT IF NOT EXISTS azure_vault_demo
PROPERTIES (
    "type" = "S3",
    "s3.endpoint" = "storageaccountname.blob.core.windows.net",
    "s3.access_key" = "storageaccountname",
    "s3.secret_key" = "***",
    "s3.region" = "eu-west-1",
    "s3.bucket" = "doris",
    "s3.root.path" = "202602021",
    "provider" = "AZURE"
);

But I get the following error :

ERROR 1105 (HY000): errCode = 2, detailMessage = ping azure failed(put), status: [COMMON_ERROR, msg: Error occurred while copying the blob:: Status code 400, "<?xml version="1.0" encoding="utf-8"?><Error><Code>AccountRequiresHttps</Code><Message>The account being accessed does not support http.
RequestId:c5790d13-f01e-0016-02e8-a24969000000
Time:2026-02-21T04:14:25.7509064Z</Message><AccountName>storageaccountname</AccountName></Error>"], properties: "s3.region" = "eu-west-1", "s3.endpoint" = "http://storageaccountname.blob.co/

I also tried with the scheme :

CREATE STORAGE VAULT IF NOT EXISTS azure_vault_demo
PROPERTIES (
    "type" = "S3",
    "s3.endpoint" = "https://storageaccountname.blob.core.windows.net/",
    "s3.access_key" = "storageaccountname",
    "s3.secret_key" = "***",
    "s3.region" = "eu-west-1",
    "s3.bucket" = "doris",
    "s3.root.path" = "202602021",
    "provider" = "AZURE"
);

This led to

ERROR 1105 (HY000): errCode = 2, detailMessage = java.net.UnknownHostException: https: Name or service not known

How can I enable HTTPs for Azure vault for storage compute decoupled?

What You Expected?

My Azure Storage account has https enabled by default. I expected I should be able to create an Azure vault, but could not do so.

Only when the security protocol is downgraded to http, it succeeds.

HTTP mode is unacceptable for enterprise-grade production workloads

How to Reproduce?

No response

Anything Else?

No response

Are you willing to submit PR?

  • Yes I am willing to submit a PR!

Code of Conduct

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions