GoogleCloudPlatform / alloydb-auth-proxy

A utility for connecting securely to your AlloyDB instances
https://cloud.google.com/alloydb/docs/auth-proxy/overview?hl=hu
Apache License 2.0
58 stars 10 forks source link

Support SA key rotation #689

Open enocom opened 1 month ago

enocom commented 1 month ago

Related to https://github.com/GoogleCloudPlatform/cloud-sql-proxy/issues/205.

We generally recommend people use Workload Identity Federation to avoid long-lived SA keys, but in some cases, people have written infrastructure to rotate SA keys manually. This is a feature request to have the Proxy watch for credential changes and recreate its client when that happens.

enocom commented 3 weeks ago

Assuming we're OK with the license, this is the default library: https://github.com/fsnotify/fsnotify.