mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
43 lines
1.6 KiB
Markdown
43 lines
1.6 KiB
Markdown
# Google Identity-Aware Proxy (IAP) — API Reference
|
|
|
|
## Libraries
|
|
|
|
| Library | Install | Purpose |
|
|
|---------|---------|---------|
|
|
| google-cloud-iap | `pip install google-cloud-iap` | IAP admin and settings management |
|
|
| google-cloud-resource-manager | `pip install google-cloud-resource-manager` | GCP project enumeration |
|
|
|
|
## Key IAP Client Methods
|
|
|
|
| Method | Description |
|
|
|--------|-------------|
|
|
| `IdentityAwareProxyAdminServiceClient()` | Create IAP admin client |
|
|
| `get_iap_settings(name=)` | Get IAP configuration for a resource |
|
|
| `update_iap_settings(iap_settings=, update_mask=)` | Update IAP settings |
|
|
| `get_iam_policy(resource=)` | Get IAP IAM bindings |
|
|
| `set_iam_policy(resource=, policy=)` | Set IAP IAM bindings |
|
|
| `list_tunnel_dest_groups(parent=)` | List TCP forwarding tunnel groups |
|
|
|
|
## IAP IAM Roles
|
|
|
|
| Role | Description |
|
|
|------|-------------|
|
|
| `roles/iap.httpsResourceAccessor` | Access IAP-protected web resources |
|
|
| `roles/iap.tunnelResourceAccessor` | Access IAP TCP forwarding tunnels |
|
|
| `roles/iap.admin` | Full IAP administration |
|
|
|
|
## gcloud CLI Commands
|
|
|
|
```bash
|
|
gcloud iap web enable --resource-type=app-engine
|
|
gcloud iap tcp enable --resource-type=compute --dest-group=GROUP
|
|
gcloud iap web get-iam-policy --project=PROJECT
|
|
gcloud compute ssh INSTANCE --tunnel-through-iap
|
|
```
|
|
|
|
## External References
|
|
|
|
- [Google IAP Documentation](https://cloud.google.com/iap/docs)
|
|
- [google-cloud-iap Python Reference](https://cloud.google.com/python/docs/reference/iap/latest)
|
|
- [IAP Programmatic Auth](https://cloud.google.com/iap/docs/authentication-howto)
|