just sal's blog > Categories > Google Cloud

category :: Google Cloud

2022-11-30

Using Custom Standard HTTP headers for Google Cloud Client Libraries
Using FieldMask for Google Cloud Client Libraries
Using JWT AccessTokens with Google Cloud Client Libraries
Using proxy servers with Google Cloud Client Libraries
Comparing Cloud Client vs GoogleAPI Libraries
Exception Handling for Google Cloud Client Libraries
Exponential Backoff and Retry for Google Cloud Client Libraries
Google Cloud Storage SignedURL with Cloud Run, Cloud Functions and GCE VMs
Managing Long Running Operations (LRO) with Google Cloud Client Libraries
Measure API request latency with Google Cloud Client Libraries
Override Request Initializers/Interceptors for Google Cloud Client Libraries
Override Trust certificates for TLS for Google Cloud Client Libraries
Pagination with Google Cloud Client Libraries
Trace and Transport logs for Google Cloud Client Libraries
PubSub Encryption: Shared Secret
Impersonation and Domain Wide Delegation with Google Cloud Client Libraries
PubSub Encryption: Service Account
PubSub Encryption KMS
PubSubEnvelope Encryption and KMS
Simple SAML SSO server for Google Cloud and Apps
Google Cloud Platform API hello world samples
Propagating SSO SAML Attributes to IAP Protected application
Restricting GCP API calls with X-Goog-Allowed-Resources header using Envoy and Squid
Building go applications using Google Cloud Build private go modules in Google Artifact Registry
Container Signing with Cosign and TPM PKCS-11
Envoy External Processing filter for decoding Google gRPC PubSub Messages
Envoy Dynamic Forward Proxy configuration with Downstream SNI for Google APIs and httpbin
Decoding gRPC Messages using Envoy
mTLS using GCP KMS Keys
Deterministic container hashes and container signing using Cosign, Bazel and Google Cloud Build
Security Token Service (STS) Credentials for HTTP and gRPC (rfc8693)
Using Google Cloud Workforce Identity Federation with SAML
KMS, TPM and HSM based Azure Certificate Credentials
Federate Google Cloud OIDC tokens for AWS Access Tokens
Federate Google Cloud OIDC tokens for Azure Access Tokens
golang-jwt using arbitrary crypto.Signer
BigQuery Write API using protobuf
Bring your own Key for BigQuery SQL column-level encryption
AEAD Encryption with BQ Remote Functions
Basic Math with BigQuery Remote Functions using Homomorphic Encryption
Managing and Restricting Google API KEYS programmatically
Envoy GCP Authentication Filter with Application Layer Transport Security (ALTS)
Search Transitive Group Membership using Google Cloud Identity
Realtime GCP assets and access monitoring using Cloud Asset Monitor and Cloud Log Streaming
GCP Service Account Last usage auditing using Golang
Distributed HTTP Proxy on Google Cloud using Terraform
Google Workspace as Identity Provider for your SAML Application
GCP Workload Identity Federation using SAML
Issuing Service Account Self-Signed JWTs on AppEngine, GCE, Cloud Run and Cloud Functions
Exempting Application Default Credentials for Google MFA Reauth
Hashicorp Vault Identity Provider with Google Workload Identity Federation
Concentric IAMCredentials Permissions: The secret life of signBlob
GCP Cloud Status Dashboard Public Dataset
Browser WebAssembly with Google Storage golang client library
Browser WebAssembly with golang http client
Decoding WireGuard with WireShark
Limiting file-size and Content using GCS SignedURL v4
Extend GCP ServiceAccount access_token upto 12 hours
Using stickfigures to show how Google Credentials work
Google Cloud Storage client-side Stream encryption with gsutil and TINK
BlobZapper: Deleting 1M files on GCS in 20mins
Using Google Cloud IAM Deny
BigQuery Remote Functions in Go
Federating Firebase to Google Cloud APIs
Cloud Build Authentication to Cloud Run, Cloud Functions, IAP
Authenticating using Workload Identity Federation to Cloud Run, Cloud Functions
Cloud Events end-to-end envelope encryption extension
Cloud Run Eventarc using Cloud Events SDK
Identifying which IAM Permissions an end-user has on a resource in Google Cloud
Override default Service Accounts for Google AppEngine Standard
Monitoring GCP API Latency locally using Envoy
Google Cloud VPC-SC basic ingress and egress rules
Understanding workload identity federation
Cross Project Service Accounts on Google Cloud
golang-jwt library for Trusted Platform Module (TPM)
IoT Core Authentication with Trusted Platform Module (TPM)
Using ImpersonatedCredentials for Google Cloud APIs and IDTokens
GCP Quota and Cost Distribution between Projects
Importing and extracting external keys for BigQuery AEAD Tink KeySets
Time limited, auto-expiring group memberships for users on Google Cloud
Google Cloud IAM Roles-Permissions Public Dataset
GCP API Gateway with gRPC
Request Annotation with Cloud Audit Logging and Monitoring on GCP
GCS signedURLs and GCP Authentication with Trusted Platform Module
Envoy TAP filter for gRPC
Recaptcha Helloworld
GKE Structured log with in go with glog and logsrus
gcloud alias for Application Default Credentials
Rclone Storage bucket sync using Cloud Scheduler and Cloud Run
GCP Workload Identity Federation using AWS Credentials
GCP Workload Identity Federation using OIDC Credentials
gRPC ALTS HelloWorld
Serverless Security Token Exchange Server(STS) and gRPC STS credentials
XML parsing with BigQuery UDF
Deterministic builds with go + bazel + grpc + docker
BigQuery UDF Marshall/Unmarshall Protocolbuffers
BigQuery HMAC-SHA256 User-defined Function
Sending logs directly to GCS using Cloud Logging fluentd
Firebase Storage and Authorization Rules engine 'helloworld'
Mounting LUKS encrypted Disks using Google Secrets Manager
External Authorization Server with Istio
GPG Stream Encryption for Google Storage in golang by chaining Pipes
Using Credential Access Boundary (DownScoped) Tokens
GPG Stream Encryption in golang by chaining Pipes
Importing SHA hashed passwords into Firebase and Identity Platform
Knative cli with Cloud Run (managed)
Mounting CSEK protected disk with LUKS encryption on Google Compute Engine
Knative Traffic Splitting
Google Cloud KMS based Service Accounts for Authentication and SignedURLs
Simple distributed tracing with OpenTracing and Stackdriver
GCS SignedURL with Google AppEngine Standard (1st gen)
Yet another image file converter on GCP
Kubernetes RBAC with Google Cloud Identity Platform/Firebase Tokens
crypto.Signer, implementations for Google Cloud KMS and Trusted Platform Modules
Managing Kubernetes CustomResourceDefinitions with Google Deployment Manager
gRPC Authentication with Cloud Run
Anti Virus file scanning on Google Cloud Storage using ClamAV
Using Google's Client Library Generation system
Vault auth and secrets on GCP
Accessing Google Cloud Storage using AWS SDK and OAuth2
YubiKey TokenSource
Using Stackdriver* with golang on Istio
gRPC Authentication with Google OpenID Connect tokens
Authenticating using Google OpenID Connect Tokens
Calling Cloud Composer to Cloud Functions and back again, securely
Automatic oauth2: Using Cloud Scheduler and Tasks to call Google APIs
Automatic OIDC: Using Cloud Scheduler, Tasks, and PubSub to securely call Cloud Run, Cloud Functions
Google Container Registry statistics from GCS access_logs
Google Cloud Trace context propagation and metrics graphs with Grafana+Prometheus and Stackdriver
GPG stream encryption and decryption on Google Cloud Functions and Cloud Run
IAP access to GCP and On-prem systems using Identity Platform
Terraform “Assume Role” and service Account impersonation on Google Cloud
Upload/Download files from a browser with GCS Signed URLs and Signed Policy Documents
Fluentd filter plugin for Google Cloud Data Loss Prevention API
Writing Developer logs with Google Cloud Logging
Istio gRPC Loadbalancing with GCP Internal LoadBalancer (ILB)
Envoy, Nginx, Apache HTTP Structured Logging with Google Cloud Logging
Setting up SAML for Google Cloud Identity for Customers and Partners (CICP)
Using ImpersonatedCredentials for Google Cloud APIs
Message Encryption with Dataflow PubSub Stream Processing
gRPC over browser Javascript: Using gRPC-Web on Google Kubernetes Engine Ingress
Faster and more Reliable ServiceAccount authentication for Google Cloud Platform APIs
Representing Gsuites and Google Cloud Org structure as a Graph Database
GCS HMAC SignedURL
GKE gRPC Ingress LoadBalancing
GCS Signed URL with Customer Supplied Encryption Key
Single Page webapp using GKE, App Engine, Google Cloud Endpoints and Identity Aware Proxy
auditd agent config for Stackdriver Logging
Combining correlated Log Lines in Google Stackdriver
Envoy for Google Cloud Identity Aware Proxy
Message Payload Encryption in Google Cloud Pub/Sub
Encrypting Google Application Default and gcloud credentials with GPG SmardCard
GCS, KMS and wrapped secrets
Google Cloud Endpoints: REST and gRPC, gRPC+Transcoding
Istio Hello World my way
Google Cloud Storage SignedURL + Resumable upload with cURL
GKE NFS with Google Cloud Single Node Filer and Google Cloud FileStore
Google Cloud SDK Dockerfile
Setting up Google Directory Sync with OpenLDAP
GCE Metadata Server Emulator
.NET on GCP

This site supports webmentions. Send me a mention via this form.