Azure Download

Azure Download

Certified

Download a blob to Kestra storage

Fetches a blob and stores it in internal storage, returning metadata and the downloaded URI.

yaml
type: io.kestra.plugin.azure.storage.blob.Download
yaml
id: azure_storage_blob_download
namespace: company.team

tasks:
  - id: download
    type: io.kestra.plugin.azure.storage.blob.Download
    endpoint: "https://yourblob.blob.core.windows.net"
    connectionString: "DefaultEndpointsProtocol=...=="
    container: "mydata"
    name: "myblob"

Download with MD5 verification against the server's Content-MD5

yaml
id: azure_storage_blob_download_verified
namespace: company.team

tasks:
  - id: download
    type: io.kestra.plugin.azure.storage.blob.Download
    endpoint: "https://yourblob.blob.core.windows.net"
    connectionString: "DefaultEndpointsProtocol=...=="
    container: "mydata"
    name: "myblob"
    validateChecksum: true
    failOnMissingChecksum: true
Properties

The blob container.

Service endpoint URL

Base HTTPS endpoint of the target service.

The full blob path on the container.

Possible Values
MD5SHA_256

Checksum algorithm

Algorithm used to compute and compare the checksum. Defaults to MD5. Note: validateChecksum (server-side) only supports MD5, since that is what Azure stores. SHA-256 requires expectedChecksum.

Connection string of the Storage Account.

Expected checksum

User-supplied expected checksum for the downloaded file. Accepts a lowercase or uppercase hex digest, or the equivalent base64 encoding (Azure's native Content-MD5 format). Takes precedence over validateChecksum.

Fail when the server has no Content-MD5

Only applies when validateChecksum is true. If true, the task fails when the Azure object has no stored Content-MD5. If false (default), validation is skipped with a warning.

Reference (ref) of the pluginDefaults to apply to this task.

The SAS token to use for authenticating requests.

This string should only be the query parameters (with or without a leading '?') and not a full URL.

Shared Key access key for authenticating requests.

Shared Key account name for authenticating requests.

Validate checksum against server's Content-MD5

If true, compute the MD5 of the downloaded file and compare it to the Content-MD5 stored on the Azure object. Many block blobs uploaded as streams have no Content-MD5; see failOnMissingChecksum to control that case.

Downloaded blob

Metadata plus internal storage URI of the fetched blob

Definitions
containerstring
eTagstring
lastModifiedstring
Formatdate-time
namestring
sizeinteger
uristring
Formaturi