Skip to content

feat(pam): add GCP Service Account proxy and gateway handler #301

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bernie-g merged 9 commits into from
Jul 7, 2026
Merged

feat(pam): add GCP Service Account proxy and gateway handler #301

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
30dbb3b
feat(pam): add GCP IAM proxy and gateway handler
bernie-g Jun 30, 2026
d8444c8
fix(pam): cap GCP credential cache TTL at 1 hour
bernie-g Jun 30, 2026
77eebc7
merge: resolve pam-revamp conflicts in access.go
bernie-g Jun 30, 2026
ef9d88c
fix(pam): block host validation bypass via userinfo in GCP proxy
bernie-g Jun 30, 2026
ba3ecd6
Merge origin/pam-revamp and add Content-Length to error responses
bernie-g Jul 4, 2026
4b72e41
Rename GcpIam to GcpServiceAccount across PAM packages
bernie-g Jul 6, 2026
76170f1
Rename GCP IAM to GCP Service Account in logs and banners
bernie-g Jul 7, 2026
53fb216
Cap audit-logged request/response bodies at 1 MiB in GCP proxy
bernie-g Jul 7, 2026
7d80f0a
Fix SSRF in isGCPHost via url.Parse to resolve hostname before suffix…
bernie-g Jul 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions packages/api/model.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -970,6 +970,8 @@ type PAMSessionCredentials struct {
Realm string `json:"realm,omitempty"`
KDCAddress string `json:"kdcAddress,omitempty"`
SPN string `json:"spn,omitempty"`
Token string `json:"token,omitempty"`
ServiceAccountEmail string `json:"serviceAccountEmail,omitempty"`
}

type MFASessionStatus string
Expand Down
Loading
Loading