# AUTHORED ONLY — not run from this repo.
# Validate with: kubectl --dry-run=client, kubeval, yamllint.
# Apply to your own GKE cluster per the GKE primer instructions.
---
id: cloud-native-gke-iap
name: "GKE Identity-Aware Proxy"
description: "BackendConfig with IAP enabled; Ingress references it; traffic authenticates before reaching the cluster."
labels:
  customer: any
  profile: gke
  chart-test-swarm/target-k8s-version: gke-1.30
cluster:
  provider: gke
  k8s_version: "1.30"
  preinstall:
    - kind: raw_manifest
      path: chart-test/fixtures/cloud-native/gke/iap-backendconfig.yaml
product:
  chart: ./chart
  release: sample
  namespace: sample
  set:
    gke.iap.enabled: "true"
    gke.iap.oauthClientId: "<REPLACE_WITH_OAUTH_CLIENT_ID>"
    gke.iap.oauthClientSecret: "<REPLACE_WITH_OAUTH_CLIENT_SECRET>"
    ingress.enabled: "true"
asserts:
  - type: helm-status-deployed
    release: sample
    namespace: sample
  - type: pods-ready
    namespace: sample
  - type: smoke-script
    path: chart-test/assertions/cloud-native/gke/iap.sh
tags: [cloud-native]
mechanisms: ['cloud:gke', 'addon:iap']
category: cloud-native
tier: authored-only
integration: gke-iap