Skip to content
/ iap_auth Public
forked from gojekfarm/iap_auth

Sidecar/Proxy for talking to an IAP enabled service

License

Notifications You must be signed in to change notification settings

goto/iap_auth

 
 

Repository files navigation

IAP Auth CircleCI

IAP Enabled Google Load Balancer

IAP: Identity Aware Proxy

Read more about IAP here

TLDR;

  1. Setup an https Google load balancer
  2. Enable IAP (Security > Identity Aware Proxy) All eligible proxies will be listed here. IAP toggle will enable Oauth Bearer token based auth.
  3. After enabling and selecting this you can add previously created service accounts to this proxy.
  4. Download this service account credentials and configure as a param in in install

Install as a Service

  1. Add service account to IAP and download the json for service account credentials.
  2. Create this kube secret

kubectl create secret generic some-svc-sa-creds --from-file=sa.json="serviceaccountfiledownloadedfromgcp.json"

  1. Install as a service

helm install gojektech-incubator/iap-auth --name=some-svc-iap --set iapHost=https://somehost,clientId=someclientid,secretName=some-svc-sa-creds

Dev setup

For go1.11, you need an environment variable set to enable go modules

$ export GO111MODULE=on

Assuming you are in the directory iap_auth

Running the tests

$ make setup
$ make test

Building the binary

$ make build
# the compiled binary would be inside iap_auth/out/

Running the binary

$ make copy-config
$ make setup
$ ./out/iap_auth server

Install as a Sidecar

TODO

About

Sidecar/Proxy for talking to an IAP enabled service

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Go 93.9%
  • Makefile 4.7%
  • Dockerfile 1.4%