GoogleCloudPlatform / GoogleCloudPlatform/cloud-sql-proxy-operator

Simplify Workload Identity Federation for Cloud SQL workloads

Aperta
#706 1 commento 0 reazioni 1 assegnatario Rivendicata da @hessjcg Vedi su GitHub
priority: p2 type: feature request
Lingua principale
Go
Stelle
120
Fork
18
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

[Workload identity federation](https://cloud.google.com/sql/docs/mysql/connect-kubernetes-engine) makes it possible to log in to the databases using the identity managed by K8s principals and an IAM service account. This is tricky to set up.

Consider ways that the operator could assist with the configuration. Perhaps the user specify an IAM principal in the AuthProxyWorkload, then the operator could automatically configure the K8s service accounts to apply the correct K8s principal to the pods where the AuthProxyWorkload is attached.

See https://github.com/GoogleCloudPlatform/cloud-sql-proxy-operator/issues/705

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.