influxdata/telegraf

SQL Server Input plugin - support for Azure Service Principals

Open

#11,126 opened on 2022年5月18日

GitHub で見る
 (3 comments) (1 reaction) (0 assignees)Go (4,161 forks)batch import
area/sqlserverfeature requesthelp wantedsize/l

Repository metrics

Stars
 (9,892 stars)
PR merge metrics
 (平均マージ 2d 12h) (30d で 136 merged PRs)

説明

Feature Request

Add support for Azure Service Principal logins to sqlserver input plugin.

Proposal:

Add the possibility to use Azure Service Principals as authentication method for Azure SQL databases.

Current behavior:

Currently DB internal logins and users and Azure Managed Identities are supported. The documentation does not say anything about support for Service Principals. The login with a Service Principal fails. The Go library used for access (https://github.com/denisenkom/go-mssqldb#azure-active-directory-authentication) says SPs are supported but the required fedauth parameter seems to be not understood or ignored by Telegraf.

Desired behavior:

Login for Azure Service Principals should be supported.

Use case:

Telegraf is not running in Azure but shall monitor a Azure SQL database where database internal logins are not allowed. In this case the use of a Service Principal is the only choice. Another use case would be Telegraf running in a Kubernetes Cluster where each VM would require the/a Managed Identity. For each of those machines a separate user would need to be created in the database (according to the docs) which is quite inconvenient.

コントリビューターガイド