Kenneth Jenkins
788017f1a6
zero: update k8s manifest to prepare for v0.27.2
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
c633a68afb
inmemory: add a test for the ListTypes race fix ( #5327 )
...
Add a test that interleaves calls to Put() (with different type strings)
and ListTypes(). At least on my machine, this appears to reliably detect
the data race fixed in commit 2f8743522d
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
a8c04a9c7d
config: set_response_headers is not unknown ( #5326 )
...
Most fields in the config.Options struct are populated by the
mapstructure package, but the SetResponseHeaders field is handled
separately. As a result, when the set_response_headers key is present,
it also shows up as an unknown config option.
Add this key to the ignoreConfigFields map, to avoid logging an
incorrect "unknown config option" message when set.
2024-10-22 13:24:17 -07:00
Caleb Doxsey
aa55332b34
core/config: allow websockets and spdy by default for k8s urls ( #5325 )
2024-10-22 13:24:17 -07:00
Caleb Doxsey
ee38346ca2
core/config: add kubernetes_service_account_token_file ( #5322 )
...
* core/config: add kubernetes_service_account_token_file
* fix loading of token file
2024-10-22 13:24:17 -07:00
Joe Kralicky
a68046e340
Core-Zero Import ( #5288 )
...
* initial core-zero import implementation
* Update /config/import openapi description and use PUT instead of POST
* update import ui tests
* Add 413 as a possible response for /config/import
* Options/Settings type conversion tests and related bugfixes
* Fixes for proto type conversion and tests
* Update core-zero import client
* Update core-zero import client
* Update import api and environment detection
* update go.mod
* remove old testdata
* Remove usage of deleted setting after merge
* remove extra newline from --version output
2024-10-22 13:24:17 -07:00
Joe Kralicky
ea8ae7bd01
authorize: fix transient errors from databroker causing redirect loop ( #5317 )
2024-10-22 13:24:17 -07:00
Joe Kralicky
56e9c5b39d
Fix race condition in databroker restart test ( #5320 )
2024-10-22 13:24:17 -07:00
Joe Kralicky
07b3b2ec07
storage: fix possible race condition with maps.Keys iterator ( #5321 )
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
da6e14280a
github: update PR template ( #5315 )
...
Update the PR template to better reflect our current workflow:
- Do not suggest using the "Fixes" keyword, as this will close linked
issues upon merge. (For most issues, the process is to let QA verify
and then close the issue.)
- Remove the "updated docs" and "updated UPGRADING.md" checklist steps.
As documentation lives in a separate repository, it is no longer
possible to update docs in the same PR.
- Expand the list of labels, based on the changelog categories (omitting
"security" because security issues should be reported separately)
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
8df5b00b9e
databroker: remove unused serverConfig fields ( #5314 )
...
The databroker.serverConfig struct has a few fields which are written
to but never read.
2024-10-22 13:24:17 -07:00
Caleb Doxsey
7a60bd7307
core/go: use hashicorp/go-set ( #5278 )
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
b03f0f1135
config: remove unused gRPC setting ( #5308 )
...
Remove the grpc_client_dns_roundrobin option as it appears to be unused
since commit bbec2cae9f
2024-10-22 13:24:17 -07:00
cui fliter
7ecc8ec1b6
refactor: Directly swap variable values ( #5305 )
...
Signed-off-by: cuishuang <imcusg@gmail.com>
2024-10-22 13:24:17 -07:00
dependabot[bot]
c4720e76fa
chore(deps): bump the go group with 28 updates ( #5312 )
...
Bumps the go group with 28 updates:
| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2 ) | `1.30.5` | `1.31.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) | `1.27.32` | `1.27.39` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) | `1.61.1` | `1.63.3` |
| [github.com/bits-and-blooms/bitset](https://github.com/bits-and-blooms/bitset ) | `1.14.2` | `1.14.3` |
| [github.com/docker/docker](https://github.com/docker/docker ) | `27.2.0+incompatible` | `27.3.1+incompatible` |
| [github.com/hashicorp/go-set/v3](https://github.com/hashicorp/go-set ) | `3.0.0-alpha.1` | `3.0.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx ) | `5.6.0` | `5.7.1` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress ) | `1.17.9` | `1.17.10` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go ) | `7.0.76` | `7.0.77` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ) | `0.68.0` | `0.69.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) | `1.20.2` | `1.20.4` |
| [github.com/prometheus/common](https://github.com/prometheus/common ) | `0.58.0` | `0.60.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/bridge/opencensus](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs ) | `1.5.3` | `1.6.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto ) | `0.26.0` | `0.27.0` |
| [golang.org/x/net](https://github.com/golang/net ) | `0.28.0` | `0.29.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2 ) | `0.22.0` | `0.23.0` |
| [golang.org/x/sys](https://github.com/golang/sys ) | `0.24.0` | `0.25.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) | `0.196.0` | `0.199.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go ) | `1.66.0` | `1.67.0` |
Updates `github.com/aws/aws-sdk-go-v2` from 1.30.5 to 1.31.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.30.5...v1.31.0 )
Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.32 to 1.27.39
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.27.32...config/v1.27.39 )
Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.61.1 to 1.63.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.61.1...service/s3/v1.63.3 )
Updates `github.com/bits-and-blooms/bitset` from 1.14.2 to 1.14.3
- [Release notes](https://github.com/bits-and-blooms/bitset/releases )
- [Commits](https://github.com/bits-and-blooms/bitset/compare/v1.14.2...v1.14.3 )
Updates `github.com/docker/docker` from 27.2.0+incompatible to 27.3.1+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v27.2.0...v27.3.1 )
Updates `github.com/hashicorp/go-set/v3` from 3.0.0-alpha.1 to 3.0.0
- [Release notes](https://github.com/hashicorp/go-set/releases )
- [Commits](https://github.com/hashicorp/go-set/compare/v3.0.0-alpha.1...v3.0.0 )
Updates `github.com/jackc/pgx/v5` from 5.6.0 to 5.7.1
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jackc/pgx/compare/v5.6.0...v5.7.1 )
Updates `github.com/klauspost/compress` from 1.17.9 to 1.17.10
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.17.9...v1.17.10 )
Updates `github.com/minio/minio-go/v7` from 7.0.76 to 7.0.77
- [Release notes](https://github.com/minio/minio-go/releases )
- [Commits](https://github.com/minio/minio-go/compare/v7.0.76...v7.0.77 )
Updates `github.com/open-policy-agent/opa` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.68.0...v0.69.0 )
Updates `github.com/prometheus/client_golang` from 1.20.2 to 1.20.4
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.2...v1.20.4 )
Updates `github.com/prometheus/common` from 0.58.0 to 0.60.0
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md )
- [Commits](https://github.com/prometheus/common/compare/v0.58.0...v0.60.0 )
Updates `go.opentelemetry.io/otel` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/bridge/opencensus` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/metric` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.uber.org/automaxprocs` from 1.5.3 to 1.6.0
- [Release notes](https://github.com/uber-go/automaxprocs/releases )
- [Changelog](https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/uber-go/automaxprocs/compare/v1.5.3...v1.6.0 )
Updates `golang.org/x/crypto` from 0.26.0 to 0.27.0
- [Commits](https://github.com/golang/crypto/compare/v0.26.0...v0.27.0 )
Updates `golang.org/x/net` from 0.28.0 to 0.29.0
- [Commits](https://github.com/golang/net/compare/v0.28.0...v0.29.0 )
Updates `golang.org/x/oauth2` from 0.22.0 to 0.23.0
- [Commits](https://github.com/golang/oauth2/compare/v0.22.0...v0.23.0 )
Updates `golang.org/x/sys` from 0.24.0 to 0.25.0
- [Commits](https://github.com/golang/sys/compare/v0.24.0...v0.25.0 )
Updates `google.golang.org/api` from 0.196.0 to 0.199.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.196.0...v0.199.0 )
Updates `google.golang.org/grpc` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.66.0...v1.67.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/bits-and-blooms/bitset
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/hashicorp/go-set/v3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/jackc/pgx/v5
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/minio/minio-go/v7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/open-policy-agent/opa
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/prometheus/common
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/bridge/opencensus
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/metric
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk/metric
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.uber.org/automaxprocs
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/oauth2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/sys
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-22 13:24:17 -07:00
dependabot[bot]
b7d242add4
chore(deps): bump the docker group in /.github with 3 updates ( #5309 )
...
Bumps the docker group in /.github with 3 updates: busybox, distroless/base and distroless/base-debian12.
Updates `busybox` from `8274294` to `c230832`
Updates `distroless/base` from `1aae189` to `6ae5fe6`
Updates `distroless/base-debian12` from `1aae189` to `6ae5fe6`
---
updated-dependencies:
- dependency-name: busybox
dependency-type: direct:production
dependency-group: docker
- dependency-name: distroless/base
dependency-type: direct:production
dependency-group: docker
- dependency-name: distroless/base-debian12
dependency-type: direct:production
dependency-group: docker
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-22 13:24:17 -07:00
dependabot[bot]
88714839f3
chore(deps): bump the github-actions group with 3 updates ( #5311 )
...
Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout ), [actions/setup-node](https://github.com/actions/setup-node ) and [docker/build-push-action](https://github.com/docker/build-push-action ).
Updates `actions/checkout` from 4.1.7 to 4.2.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](692973e3d9...d632683dd7https://github.com/actions/setup-node/releases )
- [Commits](1e60f620b9...0a44ba7841https://github.com/docker/build-push-action/releases )
- [Commits](5cd11c3a4c...4f58ea7922
2024-10-22 13:24:17 -07:00
dependabot[bot]
23d925f64a
chore(deps): bump the docker group with 3 updates ( #5310 )
...
Bumps the docker group with 3 updates: node, golang and distroless/base-debian12.
Updates `node` from `a4d1de4` to `db5dd2f`
Updates `golang` from `31dc846` to `dba79eb`
Updates `distroless/base-debian12` from `af772ed` to `662eaa2`
---
updated-dependencies:
- dependency-name: node
dependency-type: direct:production
dependency-group: docker
- dependency-name: golang
dependency-type: direct:production
dependency-group: docker
- dependency-name: distroless/base-debian12
dependency-type: direct:production
dependency-group: docker
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
c52500da73
Makefile: unset GOOS for get-envoy target ( #5300 )
...
The build-dev-docker.sh script will run
env GOOS=linux make build
to build Pomerium for Linux (before copying this binary into a minimal
Docker image).
However, now that the get-envoy target is implemented using a Go
command, it too will be affected by GOOS. As a result running this step
on macOS will result in an error when trying to execute a Linux
get-envoy binary.
Instead, let's unset GOOS when running the get-envoy command, so that it
defaults to building for the host OS.
2024-10-22 13:24:17 -07:00
Caleb Doxsey
ddbf2249a3
core/zero: add pseudonymization key ( #5290 )
2024-10-22 13:24:17 -07:00
Joe Kralicky
982275b1bb
ppl: fix empty/no-op allow block added in some cases to converted PPL policies ( #5289 )
...
Fix empty/no-op allow block added in some cases to converted PPL policies
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
2f91f08db1
config: remove unused databroker storage settings ( #5285 )
...
Config options concerning the TLS connection from databroker to storage
backend are now unused. TLS options for this connection can instead be
set directly in the databroker storage connection string.
2024-10-22 13:24:17 -07:00
Caleb Doxsey
5d271bfbb9
core/authorize: remove default header logging in debug ( #5287 )
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
2f3fa16338
zero: log organization and cluster IDs on startup ( #5284 )
2024-10-22 13:24:17 -07:00
Caleb Doxsey
2c2745b792
core/zero: add usage reporter ( #5281 )
...
* wip
* add response
* handle empty email
* use set, update log
* add test
* add coalesce, comments, test
* add test, fix bug
* use builtin cmp.Or
* remove wait ready call
* use api error
2024-10-22 13:24:17 -07:00
Denis Mishin
15bbf5b284
k8s/zero: set automountServiceAccountToken: true ( #5282 )
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
929cf3b5d5
ci: address Dockerfile warnings ( #5283 )
2024-10-22 13:24:17 -07:00
Caleb Doxsey
c5234034a8
core/zero: add report-usage API ( #5276 )
2024-10-22 13:24:17 -07:00
Caleb Doxsey
aa816dc2a8
core/zero: add organization id and cluster id to bootstrap config ( #5275 )
2024-10-22 13:24:17 -07:00
Kenneth Jenkins
a2f98c8743
zero: update k8s manifest to prepare for v0.27.1 ( #5306 )
2024-09-30 13:35:06 -07:00
backport-actions-token[bot]
e018cf0fc0
grpcutil: additional JWT validation ( #5304 )
...
grpcutil: additional JWT validation (#5303 )
Add additional validation to the grpcutil.RequireSignedJWT method. Log
any validation error, instead of returning error details in the gRPC
status message.
Co-authored-by: Kenneth Jenkins <51246568+kenjenkins@users.noreply.github.com>
2024-09-23 13:32:48 -07:00
backport-actions-token[bot]
61847b1fdc
core/proxy: fix is-enterprise check ( #5297 )
...
* core/proxy: fix is-enterprise check (#5295 )
* add testutil
---------
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2024-09-23 13:52:34 -06:00
backport-actions-token[bot]
8b6dc27a01
core/proxy: support loading sessions from headers and query string ( #5294 )
...
core/proxy: support loading sessions from headers and query string (#5291 )
* core/proxy: support loading sessions from headers and query string
* update test
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2024-09-19 12:03:58 -06:00
Kenneth Jenkins
3dadcf1825
add v0.27.0 changelog ( #5271 )
...
* add v0.27.0 changelog
* formatting, remove "New Contributors" section
* sort lines alphabetically
* accidentally deleted ':'s after category tags
* rm reverted pr #5159
---------
Co-authored-by: Denis Mishin <dmishin@pomerium.com>
2024-09-10 10:01:46 -04:00
Denis Mishin
bf30770c08
ci: update k8s manifests before v0.27.0 release ( #5270 )
...
Set image to `v0.27.0`
2024-09-10 10:01:11 -04:00
Joe Kralicky
653d8f9594
Revert "config: allow overriding port numbers using environment variables ( #5194 )" ( #5273 )
...
This reverts commit fdefcf9a16
2024-09-09 19:30:48 -04:00
Caleb Doxsey
dad954ae16
core/logging: change log.Error function ( #5251 )
...
* core/logging: change log.Error function
* use request id
2024-09-05 15:42:46 -06:00
Caleb Doxsey
97bf5edc54
core/ui: no-cache html, force back ( #5264 )
2024-09-05 10:39:50 -06:00
Caleb Doxsey
fb4ee25763
core/ui: update logo ( #5249 )
...
* update logo
* use base64
* reference local file
* use svg, resize
* purple logo
* bigger
* move logo
2024-09-05 18:13:06 +02:00
Denis Mishin
8a551e67bf
authorize: add request-id to error messages ( #5267 )
2024-09-05 11:54:37 -04:00
Caleb Doxsey
073d1564ba
core/envoy: allow TLS 1.3 ( #5263 )
2024-09-05 06:00:18 -06:00
Denis Mishin
ae584d02ed
zero/k8s: set externalTrafficPolicy: Local ( #5266 )
2024-09-04 22:26:07 -04:00
dependabot[bot]
c058b8a99c
chore(deps): bump the go group across 1 directory with 28 updates ( #5262 )
...
Bumps the go group with 20 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2 ) | `1.30.3` | `1.30.5` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) | `1.27.27` | `1.27.32` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) | `1.58.3` | `1.61.1` |
| [github.com/bits-and-blooms/bitset](https://github.com/bits-and-blooms/bitset ) | `1.13.0` | `1.14.2` |
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl ) | `1.3.9` | `1.4.0` |
| [github.com/docker/docker](https://github.com/docker/docker ) | `27.1.1+incompatible` | `27.2.0+incompatible` |
| [github.com/envoyproxy/go-control-plane](https://github.com/envoyproxy/go-control-plane ) | `0.12.1-0.20240717153332-b7af5b7dab54` | `0.13.0` |
| [github.com/google/btree](https://github.com/google/btree ) | `1.1.2` | `1.1.3` |
| [github.com/mholt/acmez/v2](https://github.com/mholt/acmez ) | `2.0.1` | `2.0.2` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go ) | `7.0.74` | `7.0.76` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ) | `0.67.1` | `0.68.0` |
| [github.com/ory/dockertest/v3](https://github.com/ory/dockertest ) | `3.10.0` | `3.11.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common ) | `0.55.0` | `0.58.0` |
| [github.com/rs/cors](https://github.com/rs/cors ) | `1.11.0` | `1.11.1` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [go.opentelemetry.io/otel/bridge/opencensus](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) | `0.190.0` | `0.196.0` |
Updates `github.com/aws/aws-sdk-go-v2` from 1.30.3 to 1.30.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.30.3...v1.30.5 )
Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.27 to 1.27.32
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.27.27...config/v1.27.32 )
Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.58.3 to 1.61.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.58.3...service/s3/v1.61.1 )
Updates `github.com/bits-and-blooms/bitset` from 1.13.0 to 1.14.2
- [Release notes](https://github.com/bits-and-blooms/bitset/releases )
- [Commits](https://github.com/bits-and-blooms/bitset/compare/v1.13.0...v1.14.2 )
Updates `github.com/cloudflare/circl` from 1.3.9 to 1.4.0
- [Release notes](https://github.com/cloudflare/circl/releases )
- [Commits](https://github.com/cloudflare/circl/compare/v1.3.9...v1.4.0 )
Updates `github.com/docker/docker` from 27.1.1+incompatible to 27.2.0+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v27.1.1...v27.2.0 )
Updates `github.com/envoyproxy/go-control-plane` from 0.12.1-0.20240717153332-b7af5b7dab54 to 0.13.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases )
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md )
- [Commits](https://github.com/envoyproxy/go-control-plane/commits/v0.13.0 )
Updates `github.com/google/btree` from 1.1.2 to 1.1.3
- [Commits](https://github.com/google/btree/compare/v1.1.2...v1.1.3 )
Updates `github.com/mholt/acmez/v2` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/mholt/acmez/releases )
- [Commits](https://github.com/mholt/acmez/compare/v2.0.1...v2.0.2 )
Updates `github.com/minio/minio-go/v7` from 7.0.74 to 7.0.76
- [Release notes](https://github.com/minio/minio-go/releases )
- [Commits](https://github.com/minio/minio-go/compare/v7.0.74...v7.0.76 )
Updates `github.com/open-policy-agent/opa` from 0.67.1 to 0.68.0
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.67.1...v0.68.0 )
Updates `github.com/ory/dockertest/v3` from 3.10.0 to 3.11.0
- [Release notes](https://github.com/ory/dockertest/releases )
- [Commits](https://github.com/ory/dockertest/compare/v3.10.0...v3.11.0 )
Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.20.2
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.19.1...v1.20.2 )
Updates `github.com/prometheus/common` from 0.55.0 to 0.58.0
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md )
- [Commits](https://github.com/prometheus/common/compare/v0.55.0...v0.58.0 )
Updates `github.com/rs/cors` from 1.11.0 to 1.11.1
- [Commits](https://github.com/rs/cors/compare/v1.11.0...v1.11.1 )
Updates `go.opentelemetry.io/otel` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/bridge/opencensus` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/metric` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `golang.org/x/sys` from 0.23.0 to 0.24.0
- [Commits](https://github.com/golang/sys/compare/v0.23.0...v0.24.0 )
Updates `google.golang.org/api` from 0.190.0 to 0.196.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.190.0...v0.196.0 )
Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20240903143218-8af14fe29dc1
- [Commits](https://github.com/googleapis/go-genproto/commits )
Updates `google.golang.org/grpc` from 1.65.0 to 1.66.0
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.65.0...v1.66.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/bits-and-blooms/bitset
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/cloudflare/circl
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/envoyproxy/go-control-plane
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/google/btree
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/mholt/acmez/v2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/minio/minio-go/v7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/open-policy-agent/opa
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/ory/dockertest/v3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/prometheus/common
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/rs/cors
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: go.opentelemetry.io/otel
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/bridge/opencensus
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/metric
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk/metric
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/sys
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-04 15:47:43 -06:00
Kenneth Jenkins
014824b525
proxy: deprecate the /.pomerium/jwt endpoint ( #5254 )
...
Disable the /.pomerium/jwt endpoint by default. Add a runtime flag to
temporarily opt out of the deprecation.
2024-09-04 11:22:18 -07:00
Kenneth Jenkins
2b84111058
config: sort runtime flags, name consistency ( #5255 )
...
Sort the runtime flag definitions alphabetically. Rename
envoy_resource_manager_enabled to just envoy_resource_manager for
consistency with the other flag names. (This flag hasn't been released
yet, so it should be OK to rename it.) Also add a doc comment.
2024-09-03 13:37:19 -07:00
dependabot[bot]
7c39084278
chore(deps): bump github.com/opencontainers/runc from 1.1.12 to 1.1.14 ( #5261 )
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.12 to 1.1.14.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.12...v1.1.14 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-03 13:14:00 -07:00
Denis Mishin
ce12e51cf5
zero/api: reset token and url cache if 401 is received ( #5256 )
...
zero/api: reset token cache if 401 is received
2024-09-03 15:40:28 -04:00
dependabot[bot]
a04d1a450c
chore(deps): bump the docker group with 2 updates ( #5258 )
...
Bumps the docker group with 2 updates: node and golang.
Updates `node` from `1ae9ba8` to `a4d1de4`
Updates `golang` from `4bda342` to `31dc846`
---
updated-dependencies:
- dependency-name: node
dependency-type: direct:production
dependency-group: docker
- dependency-name: golang
dependency-type: direct:production
dependency-group: docker
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-03 12:58:54 -06:00
dependabot[bot]
956cd281a4
chore(deps): bump the github-actions group with 6 updates ( #5259 )
...
Bumps the github-actions group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [docker/build-push-action](https://github.com/docker/build-push-action ) | `6.5.0` | `6.7.0` |
| [mikefarah/yq](https://github.com/mikefarah/yq ) | `4.44.2` | `4.44.3` |
| [google-github-actions/auth](https://github.com/google-github-actions/auth ) | `2.1.3` | `2.1.5` |
| [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud ) | `2.1.0` | `2.1.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `4.3.4` | `4.4.0` |
| [actions/setup-python](https://github.com/actions/setup-python ) | `5.1.1` | `5.2.0` |
Updates `docker/build-push-action` from 6.5.0 to 6.7.0
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](5176d81f87...5cd11c3a4chttps://github.com/mikefarah/yq/releases )
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt )
- [Commits](f15500b20a...bbdd97482fhttps://github.com/google-github-actions/auth/releases )
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md )
- [Commits](71fee32a0b...62cf5bd3e4https://github.com/google-github-actions/setup-gcloud/releases )
- [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md )
- [Commits](98ddc00a17...f0990588f1https://github.com/actions/upload-artifact/releases )
- [Commits](0b2256b8c0...50769540e7https://github.com/actions/setup-python/releases )
- [Commits](39cd14951b...f677139bbe
2024-09-03 12:57:45 -06:00
dependabot[bot]
9c3a3387b0
chore(deps): bump busybox from 9ae97d3 to 8274294 in /.github in the docker group ( #5260 )
...
chore(deps): bump busybox in /.github in the docker group
Bumps the docker group in /.github with 1 update: busybox.
Updates `busybox` from `9ae97d3` to `8274294`
---
updated-dependencies:
- dependency-name: busybox
dependency-type: direct:production
dependency-group: docker
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-03 12:56:52 -06:00
