FYI: PgBoundary - A wrapper around boundary and pgbouncer CLI

Boundary
1

Hi there,
I hacked a small wrapper around Boundary and PgBouncer to allow people the integration of Boundary into their workflows (IDEs, database tools etc.).

This is a very specific implementation but maybe it is helpful to others as well :wink:

The covered use case:

  • You have internal PostgreSQL databases
  • You connect to them via HashiCorp Boundary
  • You are using OIDC for AuthZ and AuthN
  • You are using HashiCorp Vault integration in Boundary to provide dynamic credentials
  • You want to use this setup from an IDE or other database tooling

The project: GitHub - sigterm-de/pgboundary: A wrapper around boundary and pgbouncer CLI for integration into IDE/database tooling

Cheers, Daniel

2

Hi Daniel,

Thank you for sharing this, it’s a really cool developer experience improvement over the manual copying of brokered credentials every time!

1 Like
3

I just another thought on this topic, since you are connecting to Postgres, at least when using psql you should be able to get a similar experience to the above using just boundary connect postgres. It will automatically inject brokered username/password credentials into the psql command. For things like DBeaver and other tooling, your solution is still compelling until we have something more native built into Boundary :slight_smile:.