prometheus-community / prometheus-community/postgres_exporter

IAM Auth Module

Open
#1,386 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement multi-target
Dominant language
Go
Stars
3.6k
Forks
835
Avg merge
2d 4h
Merged PRs (30d)
10

Description

Proposal

Hi all. I'd like to look at adding an IAM Auth module. Given that multi-target is meant for one exporter to support multiple db's, I feel this would be a good edition. Currently I have to have a basic auth user on each database, which is fine for the minute, but we have issues with credential rotation etc. Having IAM would mean we would be able to have an IAM role which can talk to multiple the db's and the credentials would not need rotating.

Note this would only be for multi-target, previous attempts at this weren't specifically for multi-target, and hence had problems when the token expired after 15mins.

Thoughts?

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files, tests, or entry points are named. Start by tracing the multi-target authentication flow and how credentials are handled across database targets, then clarify the IAM role and token-refresh requirements. Done means multi-target PostgreSQL connections can use IAM authentication without failing when the token expires after 15 minutes.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, postgresql
Domain
authentication, databases
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.