Skip to content

feat: implement trust boundaries#649

Open
bshaffer wants to merge 22 commits intomainfrom
trust-boundaries
Open

feat: implement trust boundaries#649
bshaffer wants to merge 22 commits intomainfrom
trust-boundaries

Conversation

@bshaffer
Copy link
Copy Markdown
Contributor

@bshaffer bshaffer commented Jan 30, 2026

b/480120031

Credential Support

  • Impersonated Service Account Credentials
  • Service Account Credentials and Service Account JWT Credentials
  • Metadata Credentials
  • External Account Authorized User Credentials

Implementation

  • Universe Check
  • Skip lookup if in cooldown
  • Cooldown state trigger
  • 6-Hour TTL
  • Lookup request should be fail open

Features which require work in GAX

  • Skip lookup if endpoint is regional
  • "stale RAB" error handling

Optional features (to be evaluated)

  • Async lookup Trigger
  • Async Retry Mechanism
  • Manual override seeding (will not implement)

Testing

  • Universe Check
  • Skip lookup if in cooldown
  • Cooldown state trigger
  • 6-Hour TTL
  • Lookup request should be fail open
  • E2E: Impersonated Service Account Credentials (Staging)
  • E2E: Service Account Credentials and Service Account JWT Credentials (Staging)
  • E2E: Metadata Credentials (Blocked)
  • E2E: External Account Authorized User Credentials

@bshaffer bshaffer marked this pull request as ready for review February 4, 2026 20:45
@bshaffer bshaffer requested a review from a team February 4, 2026 20:45
@bshaffer bshaffer marked this pull request as draft February 6, 2026 18:34
@bshaffer bshaffer marked this pull request as ready for review February 17, 2026 18:41
@bshaffer bshaffer requested a review from a team as a code owner February 17, 2026 18:41
$response = $httpHandler($request);
return json_decode((string) $response->getBody(), true);
} catch (ClientException $e) {
// We swallow all errors here - a failed trust boundary lookup
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It makes sense that we do not thrown, but it is weird to me having a catch without any code in it haha.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What kind of code would you like to see here? Maybe some logging?

@bshaffer bshaffer added the do not merge Indicates a pull request not ready for merge, due to either quality or timing. label Mar 10, 2026
@bshaffer
Copy link
Copy Markdown
Contributor Author

This is currently blocked by the backend service

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do not merge Indicates a pull request not ready for merge, due to either quality or timing.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants