article thumbnail

Keyless Google Cloud deployments from Azure Pipelines

Xebia

Deploying Google Cloud (GCP) resources via Azure Pipelines used to require service account keys. Today, however, Azure DevOps OIDC tokens can be exchanged to Google credentials using Google Cloud Workload Identity Federation. This blog uses the Google Cloud Auth to do so.

article thumbnail

How to configure Google Cloud Workload Identity Federation for Azure DevOps

Xebia

Deploying Google Cloud (GCP) resources via Azure Pipelines used to require service account keys. Today, however, Azure DevOps OIDC tokens can be exchanged to Google credentials using Google Cloud Workload Identity Federation. Find your Azure DevOps organization ID using the Accounts API. Check this example.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

How To Configure FQDN Firewall Rules In Google Cloud

Xebia

Filtering web traffic is easy with Cloud Firewall , a cloud-first NGFW with advanced threat protection. Conclusion Cloud Firewall makes it easy to filter web traffic. Image by StockSnap from Pixabay The post How To Configure FQDN Firewall Rules In Google Cloud appeared first on Xebia. Looking for more examples?

Firewall 130
article thumbnail

How to setup network connectivity between VPCs in Google Cloud

Xebia

In this blog, I will explain in high-level three networking capabilities to help you in your architecture design decisions in cases where you need to connect VPCs in Google Cloud. A Virtual Private Cloud (VPC) in Google Cloud is a virtual representation of a physical network. What is a VPC?

article thumbnail

Top 5 Organization Policy Services for Google Cloud

Xebia

Top 5 Organization Policy Services for Google Cloud The Google Cloud is a cloud service that enables users to create and manage virtual machines and Kubernetes clusters, store data, and run applications. The organization defines the domains in which all other resources reside.

article thumbnail

Simplifying Google Cloud IP Management with Terraform

Xebia

Managing IP addresses in Google Cloud can be a tedious and error-prone process, especially when relying on static IP addresses. This is where the google_netblock_ip_ranges data source comes in, simplifying the process of managing IPs in Google Cloud. 16", "130.211.0.0/22", 22", "209.85.152.0/22",

article thumbnail

How to block DNS exfiltration on Google Cloud

Xebia

Securing your cloud network (VPC) using firewall rules is common practice. Google Cloud firewall rules however do not apply to Cloud DNS calls made from the metadata server. my-evil-domain.com a0123zz cloud 04.my-evil-domain.com In this case: laurens loves cloud. DNS data exfiltration?