GPlatform Integrate
Keys, service accounts and integrations for every GPlatform product, set up in one place.
The machine half of GPlatform: API keys, service accounts and workload identity for each project, and the integrations, installations and webhooks that act in our products without a person at the keyboard. GPlatform Identity issues and checks every credential; Integrate is where they are set up, and where their use is read.
What it is
GPlatform Integrate is the cloud service for everything that acts in a GPlatform product without a person at the keyboard. People belong to GPlatform Identity; machines belong here.
What it holds
- For each project, or for each environment where a company uses environments: API keys, service accounts, and workload identity, which lets a pipeline or a workload in another cloud trade its own provider's token for a short-lived one of ours, under rules the project sets.
- Integrations, modelled on GitHub Apps: an app is registered once, installed into an organisation with the permissions it asks for, and told about what happens by signed webhooks.
One layer for every credential
Integrate never checks a credential itself. GPlatform Identity mints every key and token Integrate manages and answers every product that asks whether one may act, so a product asks one place about a person and a machine alike. Workspaces, projects and environments are Identity's too; Integrate keeps its records against them.
Where it stands
In development. The console's frame is built; nothing runs in production yet. The console sets things up and shows their use and their logs; it never makes the calls itself.