Krow/Krow-workspace
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(Makefile): replace Cloud Run deployment with Firebase Hosting for launchpad

Browse Source 
feat(firebase.json): remove site property from api-harness hosting config
feat(firebase): migrate launchpad to firebase hosting with auth

This commit migrates the internal launchpad from Cloud Run with IAP
to Firebase Hosting with Firebase Authentication. This change
simplifies the deployment process and leverages Firebase's authentication
capabilities for user access control.

The following changes were made:

- Updated the Makefile to remove Cloud Run deployment tasks and add
 Firebase Hosting deployment tasks.
- Removed the Dockerfile and .gcloudignore files, as they are no longer
 needed for Firebase Hosting.
- Updated the firebase.json file to configure Firebase Hosting for the
 launchpad.
- Modified the launchpad's index.html to include Firebase Authentication
 logic.
- Updated the iap-users.txt file to be used as a whitelist for Firebase
 Authentication.
- Added a launchpad-dev target to run the launchpad locally using the
 Firebase Hosting emulator.
- Removed the configure-iap-launchpad target, as IAP is no longer used.
- Removed the site property from the api-harness hosting configuration
 in firebase.json, as it is not needed.

The migration to Firebase Hosting provides the following benefits:

- Simplified deployment process.
- Firebase Authentication for user access control.
- Improved scalability and reliability.
- Reduced operational overhead.
This commit is contained in:
bwnyasse
2026-01-10 11:18:48 -05:00
parent 4dd9e1949f
commit ba938be7ad
6 changed files with 220 additions and 293 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
firebase/internal-launchpad/iap-users.txt
View File

@@ -1,9 +1,8 @@
# List of authorized users for the Internal Launchpad
# List of authorized users for the Krow DevOps Launchpad
# Format: one email per line, lines starting with # are comments
#
# IMPORTANT: These users must belong to the 'krowwithus.com' organization.
# This is a known limitation of enabling IAP directly on Cloud Run.
# See: https://docs.cloud.google.com/run/docs/securing/identity-aware-proxy-cloud-run#known_limitations
# Users must be listed here to access the Launchpad via Firebase Auth.
# Both internal (@krowwithus.com) and external emails are supported.
user:admin@krowwithus.com
# user:boris@oloodi.com # External users are not supported with this IAP method
user:boris@oloodi.com