mirror of
https://github.com/pomerium/pomerium.git
synced 2025-08-03 16:59:22 +02:00
update script and apply
This commit is contained in:
parent
2fecb4e583
commit
91d4d22156
9 changed files with 191 additions and 169 deletions
17
docs/enterprise/reference/configuration-settings.md
Normal file
17
docs/enterprise/reference/configuration-settings.md
Normal file
|
@ -0,0 +1,17 @@
|
|||
---
|
||||
title: Configuration Settings
|
||||
lang: en-US
|
||||
sidebarDepth: 2
|
||||
meta:
|
||||
- name: keywords
|
||||
content: configuration options settings Pomerium enterprise console
|
||||
---
|
||||
|
||||
# Configuration Settings
|
||||
|
||||
These configuration values are set in the `config.yaml` file for Pomerium Enterprise Console, or as environment variables. Once the console is accessible, configuration is adjusted through the web UI.
|
||||
|
||||
## User Impersonation
|
||||
|
||||
@travis fill me with delicious data!
|
||||
|
40
docs/enterprise/reference/configure.md
Normal file
40
docs/enterprise/reference/configure.md
Normal file
|
@ -0,0 +1,40 @@
|
|||
---
|
||||
title: Configure
|
||||
lang: en-US
|
||||
sidebarDepth: 2
|
||||
meta:
|
||||
- name: keywords
|
||||
content: configuration options settings Pomerium enterprise console
|
||||
---
|
||||
|
||||
# Configure
|
||||
|
||||
## Settings
|
||||
|
||||
### Global
|
||||
|
||||
### Cookies
|
||||
|
||||
### Timeouts
|
||||
|
||||
### GRPC
|
||||
|
||||
### Tracing
|
||||
|
||||
### Authenticate
|
||||
|
||||
### Authorize
|
||||
|
||||
### Proxy
|
||||
|
||||
## Service Accounts
|
||||
|
||||
<!-- Explain Service Accounts -->
|
||||
|
||||
## Namespaces
|
||||
|
||||
A Namespace is a collection of users, groups, routes, and policies that allows system administrators to organize, manage, and delegate permissions across their infrastructure.
|
||||
|
||||
- Policies can be optional or enforced on a Namespace, and they can be nested to create inheritance.
|
||||
- Users or groups can be granted permission to edit access to routes within a Namespace, allowing them self-serve access to the routes critical to their work.
|
||||
|
80
docs/enterprise/reference/manage.md
Normal file
80
docs/enterprise/reference/manage.md
Normal file
|
@ -0,0 +1,80 @@
|
|||
---
|
||||
title: Manage
|
||||
lang: en-US
|
||||
sidebarDepth: 2
|
||||
meta:
|
||||
- name: keywords
|
||||
content: configuration options settings Pomerium enterprise console
|
||||
---
|
||||
|
||||
# Manage
|
||||
|
||||
## Routes
|
||||
|
||||
A Route provides access to a service through Pomerium.
|
||||
|
||||
### General
|
||||
|
||||
The **General** tab defines the route path, both from the internet and to the internal service, and the policies attached. Note that policies enforced on a Namespace the Route resides in will also be applied.
|
||||
|
||||
#### Name
|
||||
|
||||
#### From
|
||||
|
||||
#### To
|
||||
|
||||
#### Redirect
|
||||
|
||||
#### Policies
|
||||
|
||||
#### Pass Identity Headers
|
||||
|
||||
#### Enable Google Cloud Serverless Authentication
|
||||
|
||||
### Matchers
|
||||
|
||||
### Rewrite
|
||||
|
||||
### Timeouts
|
||||
|
||||
### Headers
|
||||
|
||||
### Load Balancer
|
||||
|
||||
## Policies
|
||||
|
||||
A Policy defines what permissions a set of users or groups has. Policies are applied to [Namespaces] or [Routes] to associate the set of permissions with a service or set of service, completing the authentication model.
|
||||
|
||||
::: tip
|
||||
This is a separate concept from [policies](../reference/#policy) in the non-enterprise model. In open-source Pomerium, the `policy` block defines both routes and access.
|
||||
:::
|
||||
|
||||
Policies can be constructed three ways:
|
||||
|
||||
#### Web UI
|
||||
|
||||
From the **BUILDER** tab, users can add allow or deny blocks to a policy, containing and/or/not/nor logic to allow or deny sets of users and groups.
|
||||
|
||||

|
||||
|
||||
#### Pomerium Policy Language
|
||||
|
||||
From the **EDITOR** tab users can write policies in Pomerium Policy Language (**PPL**), a YAML-based notation.
|
||||
|
||||

|
||||
|
||||
#### Rego
|
||||
|
||||
For those using [OPA](https://www.openpolicyagent.org/), the **REGO** tab will accept policies written in Rego.
|
||||
|
||||
::: tip
|
||||
A policy can only support PPL or Rego. Once one is set, the other tab is disabled.
|
||||
:::
|
||||
|
||||
#### Overrides
|
||||
- **Any Authenticated User**: This setting will allow access to a route with this policy attached to any user who can authenticate to your Identity Provider (**IdP**).
|
||||
- **CORS Preflight**:
|
||||
- **Public Access**: This setting allows complete, unrestricted access to an associated route. Use this setting with caution.
|
||||
|
||||
## Certificates
|
||||
|
21
docs/enterprise/reference/reports.md
Normal file
21
docs/enterprise/reference/reports.md
Normal file
|
@ -0,0 +1,21 @@
|
|||
---
|
||||
title: Reports
|
||||
lang: en-US
|
||||
sidebarDepth: 2
|
||||
meta:
|
||||
- name: keywords
|
||||
content: configuration options settings Pomerium enterprise console
|
||||
---
|
||||
|
||||
# Reports
|
||||
|
||||
## Traffic
|
||||
|
||||
## Runtime
|
||||
|
||||
## Sessions
|
||||
|
||||
## Events
|
||||
|
||||
## Deployments
|
||||
|
Loading…
Add table
Add a link
Reference in a new issue