中文版

• Features
• Requirements
• Installation
• Usage

cloudsql-proxy: https://github.com/GoogleCloudPlatform/cloudsql-proxy/tree/v1.19.0

• Replace plaintext credential file with encrypted one which bound to instance ID.

• Go 1.15 or higher.

1. git clone https://github.com/Funny-Systems-OSS/cloudsql-proxy-hardening.git
2. cd ./cloudsql-proxy-hardening
3. go build -o ../cloud_sql_proxy_funny ./cmd/cloud_sql_proxy/

• ./cloud_sql_proxy_funny <-credential_file credential_file_path> [-use_plainfile]
  • -credential_file:
    The encrypted credential file be used to retrieve Service Account credential in cloud_sql_proxy_funny.
  • -use_plainfile:
    Setting this flag will allow you to use not encrypted credential file.