3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-11-09 20:15:54 +01:00
Code Issues Projects Releases Packages Wiki Activity
1,918 commits 165 branches 139 tags 102 MiB
Commit graph

141 commits

Author SHA1 Message Date
Caleb Doxsey
f5a558d4a0
 		grpc: disable gRPC connection re-use across services () 2021-08-24 11:47:16 -06:00
Caleb Doxsey
bbec2cae9f
 		grpc: send client traffic through envoy () 
* wip

* wip

* handle wildcards in override name

* remove wait for ready, add comment about sync, force initial sync complete in test

* address comments
 2021-08-16 16:12:22 -06:00
Caleb Doxsey
6af0655206
 		protoutil: add NewAny method for deterministic serialization () 2021-08-09 17:51:57 -06:00
wasaga
51ab7e6226
 		telemetry: add nonce and make explicit ack/nack () 2021-08-04 21:08:55 -04:00
Caleb Doxsey
31fa214983
 		envoy: add full version () 
* envoy: add full version

* remove unused import

* get envoy for lint
 2021-06-14 13:58:12 -06:00
wasaga
744e2c7993
 		xds: only tag contexts used for UpdateRecords () 2021-06-04 14:01:25 -04:00
Caleb Doxsey
4af12c4bbb
 		xds: retry storing configuration events () 2021-06-03 13:03:55 -06:00
wasaga
c71f7dca5b
 		authorize: grpc health check () 2021-05-13 15:00:10 -04:00
wasaga
cbaf33032d
 		report instance hostname () 2021-05-04 15:46:21 -06:00
wasaga
129df47f9c
 		xds extended event () 2021-05-03 12:28:11 -04:00
Caleb Doxsey
b5b1013947
 		config: add client_crl () 
* config: add client_crl

* address comments

* add ignored file
 2021-04-30 14:36:32 -06:00
Caleb Doxsey
0adbf4f24c
 		controlplane: save configuration events to databroker () 
* envoy: save events to databroker

* controlplane: add tests for envoy configuration events

* format imports
 2021-04-29 15:51:46 -06:00
Caleb Doxsey
008bda99e2
 		envoyconfig: fix metrics ingress listener name () 2021-04-26 07:49:48 -06:00
wasaga
e0c09a0998
 		log context () 2021-04-22 10:58:13 -04:00
Caleb Doxsey
7c98e0ae76
 		xdsmgr: update resource versions on NACK () 2021-04-16 08:23:40 -06:00
Caleb Doxsey
f760cdece5
 		envoyconfig: move most bootstrap config to shared package () 2021-04-14 12:07:49 -06:00
Caleb Doxsey
1dcccf2b56
 		envoy: refactor controlplane xds to new envoyconfig package () 2021-04-13 13:51:44 -06:00
Caleb Doxsey
d8f11dcb91
 		proxy: support re-proxying request through control plane for kubernetes () 
* proxy: support re-proxying request from envoy for kubernetes

* encrypt policy id for reproxy, implement tls options

* add comment, use hmac

* use httputil handler and error

* remove reproxy headers on all incoming request

* only allow re-proxying for kubernetes, strip headers

* fix tests
 2021-04-06 12:08:09 -06:00
wasaga
c27cd9030d
 		support host:port in metrics_address () 2021-03-30 18:54:33 -04:00
Caleb Doxsey
76bc7a7e9a
 		proxy: add nil check for fix-misdirected () 
* proxy: add nil check for fix-misdirected

* fix test
 2021-03-30 08:22:38 -06:00
Caleb Doxsey
e2ebef44ef
 		telemetry: add installation id () 
* telemetry: add installation id

* set installation id globally

* remove unneeded changes
 2021-03-24 07:22:54 -06:00
Caleb Doxsey
853d2dd478
 		config: use getters for certificates () 
* config: use getters for certificates

* update log message
 2021-03-23 08:02:50 -06:00
ntoofu
fee4979246
 		Add xff_num_trusted_hops config option () 
* Add `xff_num_trusted_hops` config option

* Fix code formatting with gofmt

* Update docs for `xff_num_trusted_hops`
 2021-03-22 10:30:20 -06:00
Caleb Doxsey
3690a32855
 		config: use getters for authenticate, signout and forward auth urls () 2021-03-19 14:49:25 -06:00
Caleb Doxsey
23bc3f979f
 		config: add headers to config proto () 2021-03-19 08:06:01 -06:00
Caleb Doxsey
21d87f8fdc
 		xds: use ALPN Auto config for upstream protocol when possible () 2021-03-18 14:25:00 -06:00
Caleb Doxsey
eddabc46c7
 		envoy: upgrade to v1.17.1 () 2021-03-17 19:32:58 -06:00
Caleb Doxsey
7f6107051f
 		config: add rewrite_response_headers option () 
* add lua script to rewrite response headers

* add policy config

* update docs
 2021-03-05 09:40:17 -07:00
Caleb Doxsey
b6ec01f377
 		assets: use embed instead of statik () 
* assets: use embed instead of statik

* remove empty line

* maybe fix precommit
 2021-03-03 18:56:55 -07:00
Caleb Doxsey
664358dfad
 		config: multiple endpoints for authorize and databroker () 
* wip

* update docs

* remove dead code
 2021-03-03 09:53:19 -07:00
Caleb Doxsey
a825b06014
 		metrics: add TLS options () 
* move metrics listener to envoy

* add metrics tls options

* add test

* update docs

* update config proto

* add function to validate metric addr

* fix validation
 2021-02-24 09:42:53 -07:00
Caleb Doxsey
5d60cff21e
 		databroker: refactor databroker to sync all changes () 
* refactor backend, implement encrypted store

* refactor in-memory store

* wip

* wip

* wip

* add syncer test

* fix redis expiry

* fix linting issues

* fix test by skipping non-config records

* fix backoff import

* fix init issues

* fix query

* wait for initial sync before starting directory sync

* add type to SyncLatest

* add more log messages, fix deadlock in in-memory store, always return server version from SyncLatest

* update sync types and tests

* add redis tests

* skip macos in github actions

* add comments to proto

* split getBackend into separate methods

* handle errors in initVersion

* return different error for not found vs other errors in get

* use exponential backoff for redis transaction retry

* rename raw to result

* use context instead of close channel

* store type urls as constants in databroker

* use timestampb instead of ptypes

* fix group merging not waiting

* change locked names

* update GetAll to return latest record version

* add method to grpcutil to get the type url for a protobuf type
 2021-02-18 15:24:33 -07:00
Caleb Doxsey
5be71b8e07
 		xds: fix misdirected script () 2021-02-16 14:57:21 -07:00
Caleb Doxsey
eb08658cfc
 		logs: strip query string () 2021-02-16 14:23:52 -07:00
Caleb Doxsey
963399b53d
 		proxy: implement pass-through for authenticate backend () 
* proxy: implement pass-through for authenticate backend

* address comments
 2021-02-09 14:03:54 -07:00
Caleb Doxsey
4bf5179bb6
 		controlplane: maybe fix flaky test () 2021-02-09 13:52:20 -07:00
bobby
a38913925d
 		controlplane: add global headers to virtualhost () 
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
 2021-02-08 12:30:45 -08:00
wasaga
7b06d37913
 		unique envoy cluster ids () 2021-02-08 13:52:09 -05:00
Caleb Doxsey
b7f0242090
 		authorize: remove admin () 
* authorize: remove admin

* regen rego

* add note to upgrading
 2021-02-01 15:22:02 -07:00
Caleb Doxsey
a5a3ab55fc
 		xds: fix always requiring client certificates () 
* xds: fix always requiring client certificates

* break early
 2021-02-01 12:44:22 -07:00
Caleb Doxsey
cc85ea601d
 		policy: add new certificate-authority option for downstream mTLS client certificates () 
* policy: add new certificate-authority option for downstream mTLS client certificates

* update proto, docs
 2021-02-01 08:10:32 -07:00
wasaga
66ff2cdaba
 		cluster name () 2021-01-29 16:55:38 -05:00
wasaga
67f6030e1e
 		upstream endpoints load balancer weights () 2021-01-28 09:11:14 -05:00
Caleb Doxsey
bec98051ae
 		config: return errors on invalid URLs, fix linting () 2021-01-27 07:58:30 -07:00
Caleb Doxsey
a8a703218f
 		return errors in xds build methods () 2021-01-26 14:40:39 -07:00
Caleb Doxsey
a14b65ec3f
 		controlplane: only add listener virtual domains for addresses matching the current TLS domain () 2021-01-26 09:01:24 -07:00
Caleb Doxsey
84e8f6cc05
 		config: fix databroker policies () 2021-01-25 17:18:50 -07:00
Caleb Doxsey
bcc8c17855
 		controlplane: only enable STATIC dns when all adresses are IP addresses () 2021-01-25 15:49:58 -07:00
wasaga
3a505d5573
 		expose envoy cluster options in policy () 2021-01-25 09:49:03 -05:00
wasaga
4017e0681a
 		upstream health check config () 2021-01-21 15:23:06 -05:00