Configure and use Developer Connect proxy

This page describes how to configure Developer Connect proxy.

Developer Connect proxy enhances how Developer Connect handles authentication and network access to source code management systems (SCMs) and arbitrary HTTP endpoints (Preview). When you enable the proxy for a connection, Developer Connect uses the proxy server to proxy Git requests, such as git clone, or API calls to HTTP endpoints (Preview). When you create a connection using Google Cloud console, the proxy is enabled by default. This way, you only need to grant IAM permissions to a user or service account instead of managing an access token in Secret Manager.

For example, enabling Developer Connect proxy on a connection lets you do the following:

  • Use Gemini Code Assist code customization with SCMs in privately-hosted networks, including on-premise networks.
  • Clone source code from an external SCM by using Google Cloud authentication and Identity and Access Management permissions.
  • Use Gemini Code Review Agent with SCMs in privately-hosted networks, including on-premise networks (Preview).

There are two components of Developer Connect proxy:

  • Git proxy

    For connections to source code management systems (SCMs)

  • HTTP proxy (Preview)

    For connections to arbitrary HTTP endpoints

Both of these components are enabled using the same setting. Git proxy gives you more control over usage.

Before you begin

Ensure that you have at least one connection in Developer Connect to an SCM such as GitHub, GitLab, or Bitbucket.

To get the permissions that you need to configure Developer Connect proxy for a connection, ask your administrator to grant you the Developer Connect Admin (developerconnect.admin) IAM role on the user that enables or disables the Developer Connect proxy. For more information about granting roles, see Manage access to projects, folders, and organizations.

You might also be able to get the required permissions through custom roles or other predefined roles.

To get the permissions that you need to issue requests to the Git proxy for a connection, ask your administrator to grant you the following IAM roles on the user account or service account that issues Git requests:

  • Make Git read requests such as git clone: Git Proxy Reader (roles/developerconnect.gitProxyReader)
  • Make Git write requests such as git push: Git Proxy User (roles/developerconnect.gitProxyUser)

View and update Developer Connect proxy settings

The Developer Connect proxy is enabled by default. When it's enabled, both Git proxy and HTTP proxy are enabled.

To view and update Git proxy settings, do the following:

Console

  1. In the Google Cloud console, open Developer Connect.

    Go to Developer Connect

  2. Click the Connections tab, and then click the name of the connection that you want to use.

  3. On the Connection details page, click the Additional configuration tab.

  4. Click the Developer Connect proxy toggle to disable or re-enable the Developer Connect proxy feature.

    Developer Connect proxy is enabled by default.

Google Cloud CLI

Enable the Developer Connect proxy setting for a connection

To enable Git proxy for a connection, enable the Developer Connect proxy setting by running the gcloud developer-connect connections update command:

gcloud developer-connect connections update CONNECTION_NAME \
--location=REGION \
--git-proxy-config-enabled

Disable the Developer Connect proxy for a connection

To disable Git proxy for a connection, disable the Developer Connect proxy setting by running the gcloud developer-connect connections update command:

gcloud developer-connect connections update CONNECTION_NAME \
--location=REGION \
--no-git-proxy-config-enabled

View the Git proxy setting for a connection

To view details about the Git proxy setting for a connection, run the gcloud developer-connect connections describe command:

gcloud developer-connect connections describe CONNECTION_NAME \
--location=REGION

Replace the following:

  • CONNECTION_NAME with the name of your connection.
  • REGION with the region of your connection.

The rest of this document includes instructions Git proxy only.

Find the Git proxy URI

With Developer Connect proxy enabled, you can find the Git proxy URI for your connection by doing the following:

Console

  1. In the Google Cloud console, open Developer Connect.

    Go to Developer Connect

  2. Click the Connections tab, and then click the name of the connection that you want to use.

  3. In the Connection details page, click the Repositories tab.

  4. Find the repository for your connection, and then click Copy git proxy URL.

Google Cloud CLI

To get the Git proxy URI, run the gcloud developer-connect connections git-repository-links describe command:

gcloud developer-connect connections git-repository-links describe REPOSITORY_NAME \
--connection=CONNECTION_NAME \
--location=REGION

Replace the following:

  • REPOSITORY_NAME with the name of your repository.
  • CONNECTION_NAME with the name of your connection.
  • REGION with the region of your connection.

Developer Connect API

The Git proxy URI is located in the git_proxy_url field of the GitRepositoryLink for your connection.

Issue requests to the Git proxy

After you have your Git proxy URI, you can issue requests to the Git proxy by doing the following:

  1. Configure the Git CLI to use the Google Cloud CLI credential helper:

    git config --global credential.'https://*.developerconnect.dev'.helper gcloud.sh

  2. Issue a request, such as git clone, to the Git proxy:

    git clone https://REGION.developerconnect.dev/PROJECT_NAME/CONNECTION_NAME/REPOSITORY NAME

    If you don't want to use a credential helper, then you can embed the cloud access token into the request instead:

    git clone https://unused:$(gcloud auth print-access-token)@REGION-git.developerconnect.dev/PROJECT_NAME/CONNECTION_NAME/REPOSITORY NAME

    Replace the following:

    • REPOSITORY_NAME with the name of your repository.
    • CONNECTION_NAME with the name of your connection.
    • REGION with the region of your connection.