Posts
-
authzgcpk8stokeninjector v0.1.2 Release
Released on January 19, 2025, authzgcpk8stokeninjector v0.1.2 is a maintenance update designed to keep the project secure and stable by updating core dependencies and refining the build infrastructure. What’s new This release focuses on ensuring the underlying libraries and tools are up to date: Dependency Updates: Updated google.golang.org/grpc to v1.69.4 and github.com/envoyproxy/go-control-plane/envoy to v1.32.3. Toolchain Upgrade: The project has been upgraded to the Go 1.23.5 toolchain, incorporating the latest performance and security improvements from the Go language. Build Automation: A...
Read article -
Enhancing Security with Kubernetes Workload Identity Federation in gcpidentitytokenportal v0.3.0
On January 15, 2025, we released v0.3.0 of the gcpidentitytokenportal. This update marks a significant milestone in how the portal handles authentication, introducing support for Kubernetes Workload Identity Federation (WIF). This allows users to securely vend Google Cloud identity tokens from any Kubernetes environment without the risks associated with static service account keys. What’s new The centerpiece of this release is the integration of Workload Identity Federation and Service Account Impersonation. Previously, running the portal outside of Google Kubernetes Engine...
Read article -
JSONassertify v0.0.3: Strengthening the Foundation
Released on January 4, 2025, JSONassertify v0.0.3 is a maintenance update focused on enhancing the stability and security of the library. While this release doesn’t introduce new user-facing features, it ensures that the foundation of your JSON unit testing remains robust and up-to-date. What’s new This release focuses on the internal health of the project to provide a more reliable experience: Updated Core Dependencies: We have updated the underlying org.json library to the latest version, ensuring better JSON parsing and...
Read article -
authzjwtbearerinjector v0.2.1: Maintenance and Stability
On January 2, 2025, we released authzjwtbearerinjector v0.2.1. This maintenance release focuses on keeping the project up-to-date with the latest Go runtime and core dependencies, ensuring long-term stability and security for your Envoy Proxy sidecar. What’s new This release is primarily about technical hygiene and clarity: Go 1.23 Runtime: The project has been updated to Go 1.23, bringing the latest performance improvements and language features to the service. Core Dependency Updates: We have bumped critical dependencies, including google.golang.org/grpc to v1.69.2...
Read article -
authzgcpk8stokeninjector v0.1.1: Maintenance and Stability Update
Released on January 2, 2025, version v0.1.1 of authzgcpk8stokeninjector is a maintenance release dedicated to enhancing the stability and security of our External Authorization service. This update ensures the project remains aligned with the latest upstream dependencies and language standards. What’s new This release focuses on under-the-hood improvements to keep the service robust: Dependency Updates: We have updated key libraries, including google.golang.org/grpc (to v1.69.2) and github.com/envoyproxy/go-control-plane (to v0.13.2), ensuring the service benefits from the latest bug fixes and performance improvements....
Read article -
gcpmetadataexplorer v0.1.1: Improving UI Guidance for Token Access
On December 19, 2024, we released v0.1.1 of gcpmetadataexplorer. This minor maintenance update focuses on improving the clarity of our user interface, specifically regarding how users can enable sensitive token access features. What’s new The primary change in this release is a correction to the instructional text found on the “Access Token” and “Identity Token” disabled pages. Previously, the guidance provided to users who encountered these disabled screens was inaccurate. The UI now correctly instructs users to set the ALLOW_TOKENS...
Read article -
Introducing gcpmetadataexplorer: A Simple Way to Explore GCP Metadata
We are excited to announce the launch of gcpmetadataexplorer, released on December 18, 2024. This tool provides developers with a straightforward, web-based interface to browse and inspect the data available from the Google Cloud Platform (GCP) metadata server. Instead of manually querying endpoints via curl, you can now explore your environment’s metadata visually and interactively. Key Capabilities The first version of gcpmetadataexplorer brings several essential features to make metadata exploration painless: Interactive Metadata Browsing: Navigate the GCP metadata server’s hierarchical...
Read article -
LockboxKMS v0.2.0: Strengthening the Foundation
Released on December 14, 2024, LockboxKMS v0.2.0 is a stability and maintenance release. While it doesn’t introduce new user-facing features, it significantly improves the underlying health and security of the application, ensuring a more robust experience for those using the tool to encrypt sensitive data via Google Cloud KMS. What’s new This release focuses on refinement and modernization. We have updated our core dependencies, including the Google Cloud KMS and Go cryptography libraries, to their latest versions. Additionally, the project...
Read article -
iapheaders v0.3.0: Stability and Polish
On December 14, 2024, we released iapheaders v0.3.0. This version is a dedicated maintenance release, focusing on reinforcing the security foundations of the project and polishing the user experience to ensure a more stable and transparent tool for inspecting GCP Identity-Aware Proxy (IAP) headers. What’s new While v0.3.0 doesn’t introduce sweeping new features, it brings several important refinements: Security and Core Updates: We’ve bumped critical dependencies, including golang.org/x/crypto and jwx/v2, ensuring the tool leverages the latest security patches and performance...
Read article -
gcpidentitytokenportal v0.2.0: Stability and Security Updates
Released on December 14, 2024, v0.2.0 of the gcpidentitytokenportal is a focused maintenance release. While this version doesn’t introduce new functional features, it ensures the continued reliability and security of the tool by bringing its core dependencies and toolchain up to date. What’s new This release focuses on the “under the hood” components that keep the portal running smoothly: Updated Dependencies: We’ve bumped several critical Google Cloud libraries, including the Google API Client and the GCP Metadata Client, ensuring better...
Read article
subscribe via RSS