google / exposure-notifications-verification-server

Verification component for COVID-19 Exposure Notifications.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Investigate Cloud SQL IAM instead of user/pass

sethvargo opened this issue · comments

Sigh. From https://cloud.google.com/sql/docs/postgres/iam-logins#logging-in-as-a-user

OAuth 2.0 access tokens are short lived and are only valid for one hour. Any new connections or logins created after this time will fail. For this reason, it's not recommended to use IAM database authentication with long-lived processes or applications that rely on connection pooling.

Given we rely heavily on connection pooling and have some services that are up for hours at a time, this is not a viable option.

/cc @mikehelmick FYI