Credstore
This is not an official Google product
Credstore is a centralized server providing authentication-by-proxy model. Users or services can trade auth tokens for per-service per-rpc tokens.
Sample config
scopes:
- name: vmregistry-all
service: api.VMRegistry
method: '*'
- name: keyserver-all
service: api.KeyServer
method: '*'
clients:
- vmregistry
- metaserver
- keyserver
- microdhcpd
authorizations:
- {client: metaserver, scope: vmregistry-all, via: vmregistry.global.example.com}
- {client: metaserver, scope: keyserver-all, via: keyserver.global.example.com}
- {client: microdhcpd, scope: vmregistry-all, via: vmregistry.global.example.com}