loicsikidi / wif-go

Emulate (in golang) the attribute mappings performed by GCP Workload Identity Federation

wif-go (Workload Identity Federation)

Tool (implemented in Golang) emulating the behavior of Workload Identity Federation.

Features 🚀:

• Playground in order to test interactively if a subject token match or not a WIF setup. A public instance is available here!
• wif-go: Package (used by the playground) emulating WIF behavior when a subject token is given

Why

Today, GCP (Google Cloud Platforms) doesn't provide a way to test Workload Identity Federation setup beforehand (eg. unit test, web playground) in order to check if the attribute mapping and/or the attibute condition is suitable for your use case.

Roadmap

Provider support:

• oidc
• aws
• saml

Optimization:

• wif-go.wasm: Improve the size (currently ~ 16MB) in order to load the playground faster

Acknowledgement 🫶

• The WIF Playground borrows a lot of ideas and styles from Rego Playground.
• Logo used in the playground has been generated at Gopherize.me.

Disclaimer

This is a personal project, while I do my best to ensure that everything works, I take no responsibility for issues caused by this code.