Questions tagged [google-cloud-identity-aware-proxy]

40 questions
0
votes
0 answers

GCP IAP-tunnel-agent package

Unable to find iap-tunnel-agent package for ubuntu server, is it removed from google cloud packages We are trying to install iap-tunnel-agent package in our local server to use IAP service but we are not able to find package for it.
0
votes
0 answers

How to configure postman for GCP IAP with both Authorization and Proxy-Authorization headers?

We are testing putting our API behind Google Cloud Platform's IAP. The API itself requires a JWT bearer token in the 'Authorization' header. In such a case, IAP also requires for the appropriate Google-issued token to be in the 'Proxy-Authorization'…
0
votes
1 answer

Making a request from an iap authenticated front end to a iap walled back end

I am using an IAP authenticated front end (running on react) and I want to make a request to a back end server using google cloud IAP authentication but I can't manage to authenticate with the service. From what I have observed, the request attaches…
0
votes
0 answers

Retrieve GCP groups of user using Spring Security (with IAP)

I'm building an app using Spring security and deploying it on Cloud Run behind IAP, and I want to retrieve the GCP groups of the user to give him permission or not to access APIs. I've tried to use Authentication authentication =…
0
votes
1 answer

Issue connecting to Compute Engine after updating VPC subnet - Cloud IAP to TCP netblock to SSH - firewall rule?

I created a VPC subnet to enable dual stack IPv4 and IPv6 When I try to SSH to my Compute engine, I get a message "Please consider adding a firewall rule to allow ingress from the Cloud IAP for TCP forwarding netblock to the SSH port of your…
0
votes
1 answer

What can be the solution to error code 1006 on GCP?

We are trying to access our GCP remote instance, it is ubuntu 16.04. It shows error code 1006, as shown in the image. We tried solution mentioned here but we are still getting the same error. While accessing it through putty it shows: Network…
0
votes
1 answer

start IAP tunnel programmatically with python

i am trying to connect to a VM through a IAP tunnel, and i need to first open the tunnel I am able to do it with gcloud CLI, however i would like to do it through a python script, possibly without having to resort to run bash command with the…
0
votes
1 answer

Allow-IAP Firewall Rule created in default VPC in GCP getting reflected in other VPC as well

I have a below firewall rule created in default VPC. It is configured to be applicable to all the instances in the VPC. Now, If I remove "all" from ports, I start getting below warning for all the VMs in IAP console. which is okay as per the…
0
votes
1 answer

Error when using IAP external identities sign-in page

I have an application that need to be protected by IAP, so I started external identities. From GCP console, IAP created a sign-in page on Cloud Run. When accessing to my application Sign-in page throws an error as: "The bucket is not existed" in…
0
votes
2 answers

App Engine not caching static content despite expiration set in app.yaml

I am using Google App Engine Standard Environment for a node.js app. I have a folder named public for my static files. This contains files such as chunk-XIAWB55V.js. I want these files to be heavily cached as the hashed filename will change if the…
0
votes
0 answers

Is it not possible to tunnel SSH to App Engine instance through IAP?

I understand that App Engine instances are intended to be of limited configurability, but it is possible to access them via SSH when they're in debug mode. In this scenario, we connect to them with: gcloud app instances ssh --project=$PROJECT…
0
votes
0 answers

Google Cloud IAP CORS policy is blocking my web app from calling the IAP-protected API

I've been having issues with this for too long and I am exhausted... When my web app is calling my IAP-protected API endpoint, I receive the following error: No 'Access-Control-Allow-Origin' header is present on the requested resource.. What's…
0
votes
2 answers

Unable to set up the sign-in for the Cloud Run instance and unable to roll the changes back, lost the access to my Cloud Run URL

I tried different official tutorials but they all ended up to be misleading. The last one was this: https://cloud.google.com/iap/docs/cloud-run-sign-in -- it ​says: Enable external identities, and select the Host a sign-in page for me option during…
0
votes
0 answers

GCP IAP with GCIP method - check verified email by IAP proxy

is there any way how can IAP proxy check whether is user email address verified? Currently anyone can get IAP token with correct credentials (using GCP Identity Platform). We have heavy traffic to our backends from users without email verification.…
0
votes
0 answers

Allow communication between an SPA and REST API with IAP in between

Currently there are two deployments on GKE my-app-frontend and my-app-backend, both are accessed through an ingress and protected by IAP. my-app-backend also has CORS enabled. When my-app-frontend hosted at my-app.com makes a request to…