gcp

var (
	ErrAudienceNotWhitelisted      = errors.New("audience not whitelisted")
	ErrProjectIDNotWhitelisted     = errors.New("project id not whitelisted")
	ErrProjectNumberNotWhitelisted = errors.New("project number not whitelisted")
	ErrZoneNotWhitelisted          = errors.New("zone not whitelisted")
	ErrLicenseIDWhitelisted        = errors.New("license id not whitelisted")

	ErrTokenClaimsParse   = errors.New("unable to parse claims in token")
	ErrTokenClaimsExpired = errors.New("token claims expired")
	ErrTokenMissingKeyID  = errors.New("missing kid in token")
)

var (
	// MetadataURL is the endpoint to make requests to fetch instance metadata from
	MetadataURL = "http://metadata.google.internal./computeMetadata/v1"

	MetadataIdentity = func() string { return fmt.Sprintf("%s/%s/identity", serviceAccounts(), defaultServiceAccount) }
	MetadataScopes   = func() string { return fmt.Sprintf("%s/%s/scopes", serviceAccounts(), defaultServiceAccount) }
	MetadataToken    = func() string { return fmt.Sprintf("%s/%s/token", serviceAccounts(), defaultServiceAccount) }
	MetadataEmail    = func() string { return fmt.Sprintf("%s/%s/email", serviceAccounts(), defaultServiceAccount) }
)

var GoogleOAuth2CertsURL = "https://www.googleapis.com/oauth2/v1/certs"

var MetadataHeader = &http.Header{
	"Metadata-Flavor": []string{"Google"},
}