1.8.1
This release of Just-in-Time Access introduces the following new feature:
- Option to control IAP Audience verification: You can now control whether JIT Access should verify the audience of IAP assertions by using the
IAP_VERIFY_AUDIENCEconfiguration option. Audience verification is enabled by default (as it used to be), but can now be disabled to simplify automated deployments. #450
In addition, the release includes several stability improvements and fixes, including:
- Long role names weren't properly wrapped in notification emails. #439
- When initiating a multi-party approval request, JIT Access now checks whether the selected reviewer holds the requested role at the time of request. This is in addition to the existing check that's performed at the time of approval. #421
For instructions on deploying or upgrading JIT Access, see Manage just-in-time privileged access to projects on the Google Cloud website.
Note: The latest branch always contains the latest release. Avoid using the master branch as it might contain changes that aren't ready for use yet.