SQL Server Input plugin - support for Azure Service Principals
#11 126 ouverte le 18 mai 2022
Métriques du dépôt
- Stars
- (9 892 stars)
- Métriques de merge PR
- (Merge moyen 2j 12h) (136 PRs mergées en 30 j)
Description
Feature Request
Add support for Azure Service Principal logins to sqlserver input plugin.
Proposal:
Add the possibility to use Azure Service Principals as authentication method for Azure SQL databases.
Current behavior:
Currently DB internal logins and users and Azure Managed Identities are supported. The documentation does not say anything about support for Service Principals. The login with a Service Principal fails. The Go library used for access (https://github.com/denisenkom/go-mssqldb#azure-active-directory-authentication) says SPs are supported but the required fedauth parameter seems to be not understood or ignored by Telegraf.
Desired behavior:
Login for Azure Service Principals should be supported.
Use case:
Telegraf is not running in Azure but shall monitor a Azure SQL database where database internal logins are not allowed. In this case the use of a Service Principal is the only choice. Another use case would be Telegraf running in a Kubernetes Cluster where each VM would require the/a Managed Identity. For each of those machines a separate user would need to be created in the database (according to the docs) which is quite inconvenient.