{"id":41745762,"url":"https://github.com/binxio/simple-iap-proxy","last_synced_at":"2026-01-25T00:49:08.890Z","repository":{"id":47799744,"uuid":"431450002","full_name":"binxio/simple-iap-proxy","owner":"binxio","description":"Simple proxy for accessing private GKE master endpoints and other services behind a Google Identity Aware Proxy","archived":false,"fork":false,"pushed_at":"2023-10-01T15:14:06.000Z","size":4196,"stargazers_count":19,"open_issues_count":0,"forks_count":5,"subscribers_count":6,"default_branch":"main","last_synced_at":"2024-06-19T05:38:04.307Z","etag":null,"topics":["google-cloud-platform","iap","identity-aware-proxy"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/binxio.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-11-24T11:00:48.000Z","updated_at":"2024-05-08T20:57:52.000Z","dependencies_parsed_at":"2024-06-19T05:30:44.208Z","dependency_job_id":null,"html_url":"https://github.com/binxio/simple-iap-proxy","commit_stats":null,"previous_names":[],"tags_count":13,"template":false,"template_full_name":null,"purl":"pkg:github/binxio/simple-iap-proxy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/binxio%2Fsimple-iap-proxy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/binxio%2Fsimple-iap-proxy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/binxio%2Fsimple-iap-proxy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/binxio%2Fsimple-iap-proxy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/binxio","download_url":"https://codeload.github.com/binxio/simple-iap-proxy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/binxio%2Fsimple-iap-proxy/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28740271,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-24T22:12:27.248Z","status":"ssl_error","status_checked_at":"2026-01-24T22:12:10.529Z","response_time":89,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["google-cloud-platform","iap","identity-aware-proxy"],"created_at":"2026-01-25T00:49:08.840Z","updated_at":"2026-01-25T00:49:08.885Z","avatar_url":"https://github.com/binxio.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"simple Google IAP proxy\n=======================\nThis is a simple IAP HTTP/S proxy. It will intercept the required HTTPS request and\ninject the IAP proxy authorization header.\n\n![simple-iap-proxy](./simple-iap-proxy.png)\n\n\n## simple-iap-proxy client\n\nThe client will start a real HTTP/S proxy and forward any requests for\nip addresses of GKE cluster master endpoints or specified hostnames to the IAP proxy.\nAdds the required ID token as the Proxy-Authorization header in the request. Generates self-signed\ncertificates for the targeted hosts on the fly.\n\n```\nUsage:\nsimple-iap-proxy client [flags]\n\nFlags:\n  -t, --target-url string         to forward requests to\n  -a, --iap-audience string       of the IAP application\n  -s, --service-account string    to impersonate\n  -u, --use-default-credentials   use default credentials instead of gcloud configuration\n  -C, --configuration string      name of gcloud configuration to use for credentials\n  -G, --to-gke                    proxy to GKE clusters in the project\n  -H, --to-host strings           proxy to these hosts, specified as regular expression\n      --http-protocol             proxy listens using HTTP instead of HTTPS\n\nGlobal Flags:\n  -k, --key-file string           key file for serving https\n  -c, --certificate-file string   certificate of the server\n  -p, --project string            google project id to use\n  -P, --port int                  port to listen on (default 8080)\n  -d, --debug                     provide debug information\n```\n\n## simple-iap-proxy gke-server\n\nReads the Host header of the http requests and if it matches the ip address of a GKE cluster master endpoint,\nforwards the request to it. Reject requests for any other endpoint. \n```\nUsage:\nsimple-iap-proxy gke-server\n\nGlobal Flags:\n  -k, --key-file string           key file for serving https\n  -c, --certificate-file string   certificate of the server\n  -P, --port int                  port to listen on (default 8080)\n  -p, --project string            google project id to use\n  -d, --debug                     provide debug information\n```\n\n\n## simple-iap-proxy generate-certificate\n\ngenerates a private key and self-signed certificate which can be used to\nserve over HTTPS.\n\n```\nUsage:\nsimple-iap-proxy generate-certificate [flags]\n\nFlags:\n--dns-name string   on the certificate (default \"localhost\")\n\nGlobal Flags:\n  -k, --key-file string           key file for serving https\n  -c, --certificate-file string   certificate of the server\n```\n\n## examples\nThere are two examples you can try out:\n\n- [IAP proxy to GKE clusters](./examples/to-gke-cluster/README.md)\n- [IAP Proxy to a normal service](./examples/to-service/README.md)\n\nWith the [GKE cluster setup](./examples/to-gke-cluster/README.md), you can use the [cloudbuild.yaml](examples/to-gke-cluster/cloudbuild-to-private-gke-master.yaml) to \nconnect from [Google cloudbuild](https://cloud.google.com/build).\n\n## installing the IAP proxy\nInstall the simple-iap-proxy by downloading the latest release \nfrom [github.com/binxio/simple-iap-proxy](https://github.com/binxio/simple-iap-proxy/releases).\n\n## Limitations\n- The client proxy only supports a single IAP proxy endpoint url as a target.\n\n## Caveats\n- The IAP protocol does not support websockets as Authorization header cannot be passed in. Commands which rely\n  on websockets will fail (ie kubectl exec).\n- The proxy is beta software, so I am happy to hear your feedback!\n\n[Read the blog](https://binx.io/blog/2021/12/11/how-to-connect-to-a-gke-private-endpoint-using-iap/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbinxio%2Fsimple-iap-proxy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbinxio%2Fsimple-iap-proxy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbinxio%2Fsimple-iap-proxy/lists"}