influxdata/telegraf

SQL Server Input plugin - support for Azure Service Principals

Open

#11.126 aperta il 18 mag 2022

Vedi su GitHub
 (3 commenti) (1 reazione) (0 assegnatari)Go (4161 fork)batch import
area/sqlserverfeature requesthelp wantedsize/l

Metriche repository

Star
 (9892 star)
Metriche merge PR
 (Merge medio 2g 12h) (136 PR mergiate in 30 g)

Descrizione

Feature Request

Add support for Azure Service Principal logins to sqlserver input plugin.

Proposal:

Add the possibility to use Azure Service Principals as authentication method for Azure SQL databases.

Current behavior:

Currently DB internal logins and users and Azure Managed Identities are supported. The documentation does not say anything about support for Service Principals. The login with a Service Principal fails. The Go library used for access (https://github.com/denisenkom/go-mssqldb#azure-active-directory-authentication) says SPs are supported but the required fedauth parameter seems to be not understood or ignored by Telegraf.

Desired behavior:

Login for Azure Service Principals should be supported.

Use case:

Telegraf is not running in Azure but shall monitor a Azure SQL database where database internal logins are not allowed. In this case the use of a Service Principal is the only choice. Another use case would be Telegraf running in a Kubernetes Cluster where each VM would require the/a Managed Identity. For each of those machines a separate user would need to be created in the database (according to the docs) which is quite inconvenient.

Guida contributor