Skip to content

Commit

Permalink
feat(db): support AlloyDB integration
Browse files Browse the repository at this point in the history
Teleport db service implementation for GCP CloudSQL is not that far from AlloyDB. The GCP auth token requested by the DB proxy to GCP IAM just needs an additionnal `scope` to make it work with AlloyDB.
  • Loading branch information
maximumG committed Feb 1, 2024
1 parent 542fbb0 commit 41829ff
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions lib/srv/db/common/auth.go
Original file line number Diff line number Diff line change
Expand Up @@ -334,6 +334,7 @@ func (a *dbAuth) GetCloudSQLAuthToken(ctx context.Context, sessionCtx *Session)
// https://developers.google.com/identity/protocols/oauth2/scopes#sqladmin
Scope: []string{
"https://www.googleapis.com/auth/sqlservice.admin",
"https://www.googleapis.com/auth/alloydb.login",
},
})
if err != nil {
Expand Down

0 comments on commit 41829ff

Please sign in to comment.