influxdata / influxdata/telegraf
[outputs.http] support secret store for client_id and client_secret in
- Dominant language
- Go
- Stars
- 17.8k
- Forks
- 5.8k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 161
Description
### Use Case
Storing secrets at a secret store instead of in some random location in the filesystem would be great and probably more secure.
### Expected behavior
It would be great if client_id and client_secret could bet properly added through the secret store as well as username/password.
### Actual behavior
currently you need to put the client_id and client_secret in one of the toml config files and make sure to properly restrict the access to these files, especially on Windows.
### Additional info
_No response_
Contributor guide
Research direction
Start with the outputs.http plugin and its current username/password secret-store handling. Trace how client_id and client_secret are loaded from TOML and compare the existing secret-store path. Done means both fields can be supplied through the secret store without requiring TOML values, with tests covering the configuration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 52/100