Skip to content

[Feature Request] Support for Hashicorp Vault/refreshing credentials. #290

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
kanuahs opened this issue Jul 18, 2019 · 1 comment
Closed

Comments

@kanuahs
Copy link

kanuahs commented Jul 18, 2019

I want to run postgres exporter as a kubernetes pod. PostgresSQL usernames & passwords are generated by vault and expire after a certain amount of time.

I was planning on using a sidecar to fetch credentials and inject them into the exporter container as environment variables. However I'd like to avoid restarting the pod to use the updated credentials.

Possible fix:
On db connection failure, the exporter could refresh credentials and retry if a change is detected.

@wrouesnel
Copy link
Contributor

The pod shouldn't need to be restarted, just the exporter. This is ultimately an issue of complexity - the exporter is fairly lightweight, and shouldn't have any problems being restarted.

I'd accept a PR which resolved this, but I don't use the system this way myself so I'm uncomfortable changing it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants