Hi, how to set backend to azure blob without using cli, is that possible ? We are using service principal and have defined custom provider and we are looking to have something in pulumi as in terraform regarding defining backend. We would like to have backend defined in yaml without need to use cli in workflows.

Yes, you should just need to set the

PULUMI_BACKEND_URL

environment variable to

<azblob://StorageAccountName>

, then set

AZURE_STORAGE_ACCOUNT

to `BlobContainerName`; and the

AZURE_STORAGE_KEY

and

PULUMI_CONFIG_PASSPHRASE

variables as well

is it possible to use rbac not storage key for access to storage account?

I'm not sure, I've never tried