Commit graph

1839 commits

Author SHA1 Message Date
alexfornuto
f51a02d613 init security section 2021-09-29 15:30:01 -05:00
Alex Fornuto
1a5cfda940
Docs: Batch Updates (#2628)
* define IdP acronym

* remove 'enable user imporsonation', which was removed

* copy edit recovery token

* integrate SA docs into reference

* rename Prometheus as Metrics
2021-09-29 09:49:42 -05:00
cmo-pomerium
ef284322b5
docs: grammar-change/link update (#2638)
Updated a link and made a grammar change
2021-09-28 16:13:42 -07:00
dependabot[bot]
9bd9a81ef5
chore(deps): bump github.com/ory/dockertest/v3 from 3.7.0 to 3.8.0 (#2629)
Bumps [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) from 3.7.0 to 3.8.0.
- [Release notes](https://github.com/ory/dockertest/releases)
- [Commits](https://github.com/ory/dockertest/compare/v3.7.0...v3.8.0)

---
updated-dependencies:
- dependency-name: github.com/ory/dockertest/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-28 08:00:21 -06:00
dependabot[bot]
8cfaacbe95
chore(deps): bump sigs.k8s.io/yaml from 1.2.0 to 1.3.0 (#2630)
Bumps [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) from 1.2.0 to 1.3.0.
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/yaml/compare/v1.2.0...v1.3.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/yaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-28 08:00:01 -06:00
dependabot[bot]
10bacb9b71
chore(deps): bump github.com/prometheus/common from 0.30.0 to 0.31.0 (#2631)
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.30.0 to 0.31.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.30.0...v0.31.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-28 07:59:42 -06:00
dependabot[bot]
41fc3ac110
chore(deps): bump google.golang.org/grpc from 1.40.0 to 1.41.0 (#2632)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.40.0 to 1.41.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.40.0...v1.41.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-28 07:59:15 -06:00
dependabot[bot]
b0349c5a88
chore(deps): bump github.com/open-policy-agent/opa from 0.32.0 to 0.32.1 (#2633)
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.32.0 to 0.32.1.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.32.0...v0.32.1)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-28 07:58:45 -06:00
Alex Fornuto
637489912c
TCP Client Doc (#2561)
* init client app doc

* Update docs/docs/client.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

* Update docs/docs/client.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

* rm whitespace

* document alternate ports

* add Desktop install instructions

* expand tcp port explanation

* convert to headers for links and update content

* loose ends

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-09-22 16:38:20 -05:00
Alex Fornuto
6977709f6b
small updates to Okta doc (#2623) 2021-09-22 12:37:58 -05:00
Alex Fornuto
4b88613477
DOCS: Update Enterprise Reference Docs (#2599)
* update console reference

* empty commit

* specify audience as list
2021-09-22 11:38:00 -05:00
Alex Fornuto
00f2f48f7a
Docs/batch link fixes (#2621)
* add redirect for installation

* batch of link fixes
2021-09-21 13:44:27 -07:00
Alex Fornuto
2a6ad26923
add redirect for installation (#2618) 2021-09-21 15:05:44 -05:00
Alex Fornuto
791c27d0cb
Document Enterprise API (#2595)
* init API page

* import examples from repos

* copy edits

* rm whitespace

* squash me

* additional configuration

* document full SA name

* Update docs/enterprise/api.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/api.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/api.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/api.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-09-21 15:02:45 -05:00
Caleb Doxsey
a7442b1498
pomerium-cli: add support for a custom browser command (#2617) 2021-09-21 08:31:30 -06:00
Caleb Doxsey
efffe57bf0
ppl: pass contextual information through policy (#2612)
* ppl: pass contextual information through policy

* maybe fix nginx

* fix nginx

* pr comments

* go mod tidy
2021-09-20 16:02:26 -06:00
dependabot[bot]
5340f55c20
chore(deps): bump github.com/spf13/viper from 1.8.1 to 1.9.0 (#2616)
Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.8.1 to 1.9.0.
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](https://github.com/spf13/viper/compare/v1.8.1...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-20 14:46:26 -06:00
dependabot[bot]
2a78664738
chore(deps): bump github.com/coreos/go-oidc/v3 from 3.0.0 to 3.1.0 (#2614)
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.0.0...v3.1.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-20 14:45:43 -06:00
dependabot[bot]
6a185ccbd3
chore(deps): bump google.golang.org/api from 0.56.0 to 0.57.0 (#2615)
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.56.0 to 0.57.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.56.0...v0.57.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-20 14:36:49 -06:00
Nathan Hayfield
1f718e4ce1
add description to service accounts (#2611) 2021-09-20 14:10:12 -04:00
Alex Fornuto
8e8178e03c
Add docs team as a code owner of packages.json (#2605)
* Add docs team as a code owner of packages.json

`packages.json` Is used by the docs site to manage vuepress and its plugins/dependencies.

* empty commit to bypass CLA hangup
2021-09-16 14:26:29 -05:00
Denis Mishin
0878315d60
bump protoc-validate (#2606) 2021-09-16 12:02:55 -04:00
Alex Fornuto
0e067d19fd
Update CODEOWNERS (#2603)
Dev review is still required when I update .vuepress files. This is an attempt to rectify that.
2021-09-15 17:18:07 -05:00
Alex Fornuto
8bc39a682b
add copy button to code snippets (#2597) 2021-09-15 15:30:07 -05:00
Caleb Doxsey
2f7a79d4f5
authclient: clone TLS configuration to prevent overriding NextProtos (#2594) 2021-09-13 16:12:26 -06:00
dependabot[bot]
e03460e124
chore(deps): bump go.uber.org/zap from 1.19.0 to 1.19.1 (#2592)
Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/uber-go/zap/compare/v1.19.0...v1.19.1)

---
updated-dependencies:
- dependency-name: go.uber.org/zap
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-13 16:59:11 -04:00
dependabot[bot]
772401ed05
chore(deps): bump github.com/rs/zerolog from 1.24.0 to 1.25.0 (#2591)
Bumps [github.com/rs/zerolog](https://github.com/rs/zerolog) from 1.24.0 to 1.25.0.
- [Release notes](https://github.com/rs/zerolog/releases)
- [Commits](https://github.com/rs/zerolog/compare/v1.24.0...v1.25.0)

---
updated-dependencies:
- dependency-name: github.com/rs/zerolog
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-13 16:58:37 -04:00
Caleb Doxsey
77ae17d23b
tcptunnel: force the use of HTTP/1.1 during ALPN (#2593)
* tcptunnel: force the use of HTTP/1.1 during ALPN

* remove unused code
2021-09-13 13:53:19 -06:00
Caleb Doxsey
13b2c8a403
pomerium-cli: use cache dir instead of config dir (#2588) 2021-09-10 15:26:24 -06:00
Travis Groth
a812649a2e
cli: update tcp log output format (#2586) 2021-09-10 10:02:58 -04:00
Caleb Doxsey
532b997fed
userinfo: format exp, iat and updated_at (#2585) 2021-09-10 06:23:54 -06:00
Caleb Doxsey
4720199d59
autocert: remove log (#2584) 2021-09-10 06:23:32 -06:00
Alex Fornuto
62ac580a57
New Topic Page: Original Request Context (#2569)
* init original context doc

* copy edit

* init Service Account page

* update and expand user context article

* fix header name

* copy edit

* update response path through Pomerium

* clarify SA name is user in policy creation
2021-09-09 11:26:57 -05:00
Alex Fornuto
11939fdc8a
Document recovery token generation (#2579)
* document recovery token generation

* run console anywhere to generate token
2021-09-09 09:38:56 -05:00
Travis Groth
1b089e44d2
docs: rename updated icon image (#2582) 2021-09-08 17:18:02 -04:00
Travis Groth
0677e10a14
docs: add updated icon asset (#2580) 2021-09-08 14:05:53 -07:00
dependabot[bot]
b9d777ce25
chore(deps): bump contrib.go.opencensus.io/exporter/prometheus (#2549)
Bumps [contrib.go.opencensus.io/exporter/prometheus](https://github.com/census-ecosystem/opencensus-go-exporter-prometheus) from 0.3.0 to 0.4.0.
- [Release notes](https://github.com/census-ecosystem/opencensus-go-exporter-prometheus/releases)
- [Commits](https://github.com/census-ecosystem/opencensus-go-exporter-prometheus/compare/v0.3.0...v0.4.0)

---
updated-dependencies:
- dependency-name: contrib.go.opencensus.io/exporter/prometheus
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-09-07 09:32:11 -06:00
dependabot[bot]
1cee7cd362
chore(deps): bump github.com/open-policy-agent/opa from 0.31.0 to 0.32.0 (#2573)
* chore(deps): bump github.com/open-policy-agent/opa from 0.31.0 to 0.32.0

Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.31.0 to 0.32.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* go mod tidy

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-09-07 09:26:30 -06:00
dependabot[bot]
06bfbbaedb
chore(deps): bump github.com/shirou/gopsutil/v3 from 3.21.7 to 3.21.8 (#2577)
Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) from 3.21.7 to 3.21.8.
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](https://github.com/shirou/gopsutil/compare/v3.21.7...v3.21.8)

---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-07 09:22:07 -06:00
dependabot[bot]
8577d871d8
chore(deps): bump github.com/golangci/golangci-lint (#2576)
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.42.0 to 1.42.1.
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/golangci/golangci-lint/compare/v1.42.0...v1.42.1)

---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-07 09:17:54 -06:00
dependabot[bot]
5595863ce6
chore(deps): bump github.com/docker/docker (#2551)
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.7+incompatible to 20.10.8+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Changelog](https://github.com/moby/moby/blob/master/CHANGELOG.md)
- [Commits](https://github.com/docker/docker/compare/v20.10.7...v20.10.8)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-07 08:34:31 -06:00
Caleb Doxsey
823b430d60
google: support provider URL (#2567)
* google: support provider URL

* change google default options
2021-09-07 08:14:52 -06:00
dependabot[bot]
3ee0c36c49
chore(deps): bump google.golang.org/api from 0.54.0 to 0.56.0 (#2574)
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.54.0 to 0.56.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.54.0...v0.56.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-07 08:14:01 -06:00
dependabot[bot]
bf1b3633ff
chore(deps): bump github.com/caddyserver/certmagic from 0.14.4 to 0.14.5 (#2575)
Bumps [github.com/caddyserver/certmagic](https://github.com/caddyserver/certmagic) from 0.14.4 to 0.14.5.
- [Release notes](https://github.com/caddyserver/certmagic/releases)
- [Commits](https://github.com/caddyserver/certmagic/compare/v0.14.4...v0.14.5)

---
updated-dependencies:
- dependency-name: github.com/caddyserver/certmagic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-07 08:13:35 -06:00
Caleb Doxsey
3773a95d50
directory: implement exponential backoff for refresh (#2570)
* directory: implement exponential backoff for refresh

* disable randomization for exponential backoff testing
2021-09-03 15:49:56 -06:00
Caleb Doxsey
0786c7fc45
authorize: use session.user_id in headers (#2571) 2021-09-03 14:51:09 -06:00
Travis Groth
0c2a08b5a3
ci: ignore multiple run commands (#2566) 2021-09-03 16:48:14 -04:00
Travis Groth
719a483b2b
docs: enterprise console v0.15.2 changelog (#2564) 2021-09-03 12:17:31 -04:00
Caleb Doxsey
eca2fc62d8
ppl: use session.user_id instead of user.id for user criterion (#2562)
* ppl: use session.user_id instead of user.id for user criterion

* fix test
2021-09-03 07:53:00 -06:00
Caleb Doxsey
33f5190572
config: remove signature_key_algorithm (#2557)
* config: remove signature_key_algorithm

* typo

* add more tests
2021-09-02 11:36:43 -06:00