influxdata/telegraf

SQL Server Input plugin - support for Azure Service Principals

Open

#11,126 创建于 2022年5月18日

在 GitHub 查看
 (3 评论) (1 反应) (0 负责人)Go (4,161 fork)batch import
area/sqlserverfeature requesthelp wantedsize/l

仓库指标

Star
 (9,892 star)
PR 合并指标
 (平均合并 2天 12小时) (30 天内合并 136 个 PR)

描述

Feature Request

Add support for Azure Service Principal logins to sqlserver input plugin.

Proposal:

Add the possibility to use Azure Service Principals as authentication method for Azure SQL databases.

Current behavior:

Currently DB internal logins and users and Azure Managed Identities are supported. The documentation does not say anything about support for Service Principals. The login with a Service Principal fails. The Go library used for access (https://github.com/denisenkom/go-mssqldb#azure-active-directory-authentication) says SPs are supported but the required fedauth parameter seems to be not understood or ignored by Telegraf.

Desired behavior:

Login for Azure Service Principals should be supported.

Use case:

Telegraf is not running in Azure but shall monitor a Azure SQL database where database internal logins are not allowed. In this case the use of a Service Principal is the only choice. Another use case would be Telegraf running in a Kubernetes Cluster where each VM would require the/a Managed Identity. For each of those machines a separate user would need to be created in the database (according to the docs) which is quite inconvenient.

贡献者指南