Enable Google Cloud Serverless Authentication

Summary

Enable Google Cloud Serverless Authentication enables sending a signed Authorization Header to upstream GCP services.

This setting requires you to set Google Cloud Serverless Authentication Service Account or run Pomerium in an environment with a GCP service account present in default locations.

How to configure

Core

Config file keys	Environment variables	Type	Default
enable_google_cloud_serverless_authentication	ENABLE_GOOGLE_CLOUD_SERVERLESS_AUTHENTICATION	boolean	false

Enterprise

Enable Google Cloud Serverless Authentication under General route settings in the Console:

Kubernetes

Kubernetes does not support Enable Google Cloud Serverless Authentication

Examples

enable_google_cloud_serverless_authentication: true

ENABLE_GOOGLE_CLOUD_SERVERLESS_AUTHENTICATION=true