Pomerium as Identity Aware Reverse-Proxy for Cloud Run

Support
5

Hi,

Newlines in the JSON are ok, they just can’t be in a JSON string literal. I’m not sure how that would’ve happened.

This option also supports embedding the JSON directly. Assuming you’re using YAML:

google_cloud_serverless_authentication_service_account: |
  {
    "type": "service_account",
    "project_id": "pomerium-sandbox-2020q3",
    "private_key_id": "a1df7f3740069feccb3ed32d173e7f777129eb11",
    "private_key": "-----BEGIN PRIVATE KEY-----\nBASE64HERE\n-----END PRIVATE KEY-----\n",
    "client_email": "cloudrun-invoker@pomerium-sandbox-2020q3.iam.gserviceaccount.com",
    "client_id": "115434192173748592038",
    "auth_uri": "https://accounts.google.com/o/oauth2/auth",
    "token_uri": "https://oauth2.googleapis.com/token",
    "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
    "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/cloudrun-invoker%40pomerium-sandbox-2020q3.iam.gserviceaccount.com"
  }