WeblateOrg / WeblateOrg/weblate

Support GCP IAM authentication for Redis

Open
#17,539 3 comments 0 reactions 0 assignees View on GitHub
enhancement Waiting for: Demand
Dominant language
Python
Stars
6.1k
Forks
1.4k
Avg merge
9h 53m
Merged PRs (30d)
395

Description

### Describe the problem

Allow the Weblate Helm chart to connect to Google Cloud Memorystore Redis using IAM authentication instead of static passwords. We could use a traditional username/password account which is not the best way to achieve that from google, we should use a service account for that (which has not password for this type of account)

### Solution brainstorm

Currently, the chart only supports standard Redis passwords. In GCP, Memorystore can now support IAM-based authentication for Redis, and the Python library [google-cloud-iam](https://pypi.org/project/google-cloud-iam/)
allows generating short-lived access tokens to connect. Here an [exemple](https://docs.cloud.google.com/memorystore/docs/cluster/client-library-connection#iam-auth-in-transit-encryption)

### Describe alternatives you have considered

_No response_

### Screenshots

_No response_

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.