Caleb Doxsey
9e9ed8853f
ppl: more flexible matchers ( #5336 )
...
* ppl: more flexible matchers
* make the string list matcher "is" match arrays with only a single item
* re-use has
* default list matcher to has
2024-10-25 07:56:57 -06:00
Caleb Doxsey
d2c14cd6d2
logging: remove ctx from global log methods ( #5337 )
...
* log: remove warn
* log: update debug
* log: update info
* remove level, log
* remove contextLogger function
2024-10-23 14:18:52 -06:00
Joe Kralicky
1ccaf1b22b
config: suppress unused warnings for all fields in embedded route envoy options ( #5330 )
2024-10-22 16:46:22 -04:00
Kenneth Jenkins
298a5a94a5
inmemory: add a test for the ListTypes race fix ( #5327 )
...
Add a test that interleaves calls to Put() (with different type strings)
and ListTypes(). At least on my machine, this appears to reliably detect
the data race fixed in commit 2f8743522d
2024-10-15 15:32:29 -07:00
Kenneth Jenkins
11054a943d
config: set_response_headers is not unknown ( #5326 )
...
Most fields in the config.Options struct are populated by the
mapstructure package, but the SetResponseHeaders field is handled
separately. As a result, when the set_response_headers key is present,
it also shows up as an unknown config option.
Add this key to the ignoreConfigFields map, to avoid logging an
incorrect "unknown config option" message when set.
2024-10-15 12:40:14 -07:00
Caleb Doxsey
075ea01b0a
core/config: allow websockets and spdy by default for k8s urls ( #5325 )
2024-10-10 17:55:34 -06:00
Caleb Doxsey
27947b19cb
core/config: add kubernetes_service_account_token_file ( #5322 )
...
* core/config: add kubernetes_service_account_token_file
* fix loading of token file
2024-10-10 14:53:45 -06:00
Joe Kralicky
0e13248685
Core-Zero Import ( #5288 )
...
* initial core-zero import implementation
* Update /config/import openapi description and use PUT instead of POST
* update import ui tests
* Add 413 as a possible response for /config/import
* Options/Settings type conversion tests and related bugfixes
* Fixes for proto type conversion and tests
* Update core-zero import client
* Update core-zero import client
* Update import api and environment detection
* update go.mod
* remove old testdata
* Remove usage of deleted setting after merge
* remove extra newline from --version output
2024-10-09 18:51:56 -04:00
Joe Kralicky
5b4fe8969d
authorize: fix transient errors from databroker causing redirect loop ( #5317 )
2024-10-07 18:48:20 -04:00
Joe Kralicky
da866c1ac0
Fix race condition in databroker restart test ( #5320 )
2024-10-07 18:48:05 -04:00
Joe Kralicky
2f8743522d
storage: fix possible race condition with maps.Keys iterator ( #5321 )
2024-10-07 18:45:23 -04:00
Kenneth Jenkins
2aea633f80
github: update PR template ( #5315 )
...
Update the PR template to better reflect our current workflow:
- Do not suggest using the "Fixes" keyword, as this will close linked
issues upon merge. (For most issues, the process is to let QA verify
and then close the issue.)
- Remove the "updated docs" and "updated UPGRADING.md" checklist steps.
As documentation lives in a separate repository, it is no longer
possible to update docs in the same PR.
- Expand the list of labels, based on the changelog categories (omitting
"security" because security issues should be reported separately)
2024-10-07 12:11:05 -07:00
Kenneth Jenkins
6f6186a67d
databroker: remove unused serverConfig fields ( #5314 )
...
The databroker.serverConfig struct has a few fields which are written
to but never read.
2024-10-04 12:04:59 -07:00
Caleb Doxsey
410354bc00
core/go: use hashicorp/go-set ( #5278 )
2024-10-03 12:59:11 -06:00
Kenneth Jenkins
5679589014
zero: set k8s deployment to follow :latest tag ( #5313 )
2024-10-03 11:39:55 -07:00
Kenneth Jenkins
01d375f0bc
config: remove unused gRPC setting ( #5308 )
...
Remove the grpc_client_dns_roundrobin option as it appears to be unused
since commit bbec2cae9f
2024-10-03 10:14:54 -07:00
cui fliter
105743be37
refactor: Directly swap variable values ( #5305 )
...
Signed-off-by: cuishuang <imcusg@gmail.com>
2024-10-03 10:10:29 -07:00
dependabot[bot]
4c052483da
chore(deps): bump the go group with 28 updates ( #5312 )
...
Bumps the go group with 28 updates:
| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2 ) | `1.30.5` | `1.31.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) | `1.27.32` | `1.27.39` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) | `1.61.1` | `1.63.3` |
| [github.com/bits-and-blooms/bitset](https://github.com/bits-and-blooms/bitset ) | `1.14.2` | `1.14.3` |
| [github.com/docker/docker](https://github.com/docker/docker ) | `27.2.0+incompatible` | `27.3.1+incompatible` |
| [github.com/hashicorp/go-set/v3](https://github.com/hashicorp/go-set ) | `3.0.0-alpha.1` | `3.0.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx ) | `5.6.0` | `5.7.1` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress ) | `1.17.9` | `1.17.10` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go ) | `7.0.76` | `7.0.77` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ) | `0.68.0` | `0.69.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) | `1.20.2` | `1.20.4` |
| [github.com/prometheus/common](https://github.com/prometheus/common ) | `0.58.0` | `0.60.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/bridge/opencensus](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go ) | `1.29.0` | `1.30.0` |
| [go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs ) | `1.5.3` | `1.6.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto ) | `0.26.0` | `0.27.0` |
| [golang.org/x/net](https://github.com/golang/net ) | `0.28.0` | `0.29.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2 ) | `0.22.0` | `0.23.0` |
| [golang.org/x/sys](https://github.com/golang/sys ) | `0.24.0` | `0.25.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) | `0.196.0` | `0.199.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go ) | `1.66.0` | `1.67.0` |
Updates `github.com/aws/aws-sdk-go-v2` from 1.30.5 to 1.31.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.30.5...v1.31.0 )
Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.32 to 1.27.39
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.27.32...config/v1.27.39 )
Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.61.1 to 1.63.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.61.1...service/s3/v1.63.3 )
Updates `github.com/bits-and-blooms/bitset` from 1.14.2 to 1.14.3
- [Release notes](https://github.com/bits-and-blooms/bitset/releases )
- [Commits](https://github.com/bits-and-blooms/bitset/compare/v1.14.2...v1.14.3 )
Updates `github.com/docker/docker` from 27.2.0+incompatible to 27.3.1+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v27.2.0...v27.3.1 )
Updates `github.com/hashicorp/go-set/v3` from 3.0.0-alpha.1 to 3.0.0
- [Release notes](https://github.com/hashicorp/go-set/releases )
- [Commits](https://github.com/hashicorp/go-set/compare/v3.0.0-alpha.1...v3.0.0 )
Updates `github.com/jackc/pgx/v5` from 5.6.0 to 5.7.1
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jackc/pgx/compare/v5.6.0...v5.7.1 )
Updates `github.com/klauspost/compress` from 1.17.9 to 1.17.10
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.17.9...v1.17.10 )
Updates `github.com/minio/minio-go/v7` from 7.0.76 to 7.0.77
- [Release notes](https://github.com/minio/minio-go/releases )
- [Commits](https://github.com/minio/minio-go/compare/v7.0.76...v7.0.77 )
Updates `github.com/open-policy-agent/opa` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.68.0...v0.69.0 )
Updates `github.com/prometheus/client_golang` from 1.20.2 to 1.20.4
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.2...v1.20.4 )
Updates `github.com/prometheus/common` from 0.58.0 to 0.60.0
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md )
- [Commits](https://github.com/prometheus/common/compare/v0.58.0...v0.60.0 )
Updates `go.opentelemetry.io/otel` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/bridge/opencensus` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/metric` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.29.0...v1.30.0 )
Updates `go.uber.org/automaxprocs` from 1.5.3 to 1.6.0
- [Release notes](https://github.com/uber-go/automaxprocs/releases )
- [Changelog](https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/uber-go/automaxprocs/compare/v1.5.3...v1.6.0 )
Updates `golang.org/x/crypto` from 0.26.0 to 0.27.0
- [Commits](https://github.com/golang/crypto/compare/v0.26.0...v0.27.0 )
Updates `golang.org/x/net` from 0.28.0 to 0.29.0
- [Commits](https://github.com/golang/net/compare/v0.28.0...v0.29.0 )
Updates `golang.org/x/oauth2` from 0.22.0 to 0.23.0
- [Commits](https://github.com/golang/oauth2/compare/v0.22.0...v0.23.0 )
Updates `golang.org/x/sys` from 0.24.0 to 0.25.0
- [Commits](https://github.com/golang/sys/compare/v0.24.0...v0.25.0 )
Updates `google.golang.org/api` from 0.196.0 to 0.199.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.196.0...v0.199.0 )
Updates `google.golang.org/grpc` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.66.0...v1.67.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/bits-and-blooms/bitset
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/hashicorp/go-set/v3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/jackc/pgx/v5
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/minio/minio-go/v7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/open-policy-agent/opa
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/prometheus/common
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/bridge/opencensus
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/metric
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk/metric
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.uber.org/automaxprocs
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/oauth2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/sys
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-01 10:00:04 -07:00
dependabot[bot]
9b1bea6a4a
chore(deps): bump the docker group in /.github with 3 updates ( #5309 )
...
Bumps the docker group in /.github with 3 updates: busybox, distroless/base and distroless/base-debian12.
Updates `busybox` from `8274294` to `c230832`
Updates `distroless/base` from `1aae189` to `6ae5fe6`
Updates `distroless/base-debian12` from `1aae189` to `6ae5fe6`
---
updated-dependencies:
- dependency-name: busybox
dependency-type: direct:production
dependency-group: docker
- dependency-name: distroless/base
dependency-type: direct:production
dependency-group: docker
- dependency-name: distroless/base-debian12
dependency-type: direct:production
dependency-group: docker
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-01 09:54:17 -07:00
dependabot[bot]
abffe3d9f8
chore(deps): bump the github-actions group with 3 updates ( #5311 )
...
Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout ), [actions/setup-node](https://github.com/actions/setup-node ) and [docker/build-push-action](https://github.com/docker/build-push-action ).
Updates `actions/checkout` from 4.1.7 to 4.2.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](692973e3d9...d632683dd7https://github.com/actions/setup-node/releases )
- [Commits](1e60f620b9...0a44ba7841https://github.com/docker/build-push-action/releases )
- [Commits](5cd11c3a4c...4f58ea7922
2024-10-01 09:51:10 -07:00
dependabot[bot]
35f4a4b49f
chore(deps): bump the docker group with 3 updates ( #5310 )
...
Bumps the docker group with 3 updates: node, golang and distroless/base-debian12.
Updates `node` from `a4d1de4` to `db5dd2f`
Updates `golang` from `31dc846` to `dba79eb`
Updates `distroless/base-debian12` from `af772ed` to `662eaa2`
---
updated-dependencies:
- dependency-name: node
dependency-type: direct:production
dependency-group: docker
- dependency-name: golang
dependency-type: direct:production
dependency-group: docker
- dependency-name: distroless/base-debian12
dependency-type: direct:production
dependency-group: docker
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-01 09:49:52 -07:00
Kenneth Jenkins
c011957389
grpcutil: additional JWT validation ( #5303 )
...
Add additional validation to the grpcutil.RequireSignedJWT method. Log
any validation error, instead of returning error details in the gRPC
status message.
2024-09-23 13:17:03 -07:00
Kenneth Jenkins
753b24dd7b
Makefile: unset GOOS for get-envoy target ( #5300 )
...
The build-dev-docker.sh script will run
env GOOS=linux make build
to build Pomerium for Linux (before copying this binary into a minimal
Docker image).
However, now that the get-envoy target is implemented using a Go
command, it too will be affected by GOOS. As a result running this step
on macOS will result in an error when trying to execute a Linux
get-envoy binary.
Instead, let's unset GOOS when running the get-envoy command, so that it
defaults to building for the host OS.
2024-09-20 10:54:07 -07:00
Caleb Doxsey
bfc782ff06
core/zero: add pseudonymization key ( #5290 )
2024-09-19 14:43:01 -06:00
Caleb Doxsey
9d6b656fbe
core/proxy: fix is-enterprise check ( #5295 )
2024-09-19 13:10:45 -06:00
Caleb Doxsey
52d4899d4c
core/proxy: support loading sessions from headers and query string ( #5291 )
...
* core/proxy: support loading sessions from headers and query string
* update test
2024-09-19 09:23:13 -06:00
Joe Kralicky
d06a101f79
ppl: fix empty/no-op allow block added in some cases to converted PPL policies ( #5289 )
...
Fix empty/no-op allow block added in some cases to converted PPL policies
2024-09-16 18:52:54 -04:00
Kenneth Jenkins
6171c09596
config: remove unused databroker storage settings ( #5285 )
...
Config options concerning the TLS connection from databroker to storage
backend are now unused. TLS options for this connection can instead be
set directly in the databroker storage connection string.
2024-09-16 11:58:57 -07:00
Caleb Doxsey
10e1746471
core/authorize: remove default header logging in debug ( #5287 )
2024-09-13 13:04:33 -06:00
Kenneth Jenkins
c96d5283e2
zero: log organization and cluster IDs on startup ( #5284 )
2024-09-13 09:32:15 -07:00
Caleb Doxsey
146efc1b13
core/zero: add usage reporter ( #5281 )
...
* wip
* add response
* handle empty email
* use set, update log
* add test
* add coalesce, comments, test
* add test, fix bug
* use builtin cmp.Or
* remove wait ready call
* use api error
2024-09-12 15:45:54 -06:00
Denis Mishin
82a9dbe42a
k8s/zero: set automountServiceAccountToken: true ( #5282 )
2024-09-12 13:10:43 -04:00
Kenneth Jenkins
e21fe2d0b3
ci: address Dockerfile warnings ( #5283 )
2024-09-11 16:56:47 -07:00
Caleb Doxsey
1e5f623c0e
core/zero: add report-usage API ( #5276 )
2024-09-11 08:52:56 -06:00
Caleb Doxsey
790c11b368
core/zero: add organization id and cluster id to bootstrap config ( #5275 )
2024-09-10 11:31:45 -06:00
Denis Mishin
db52d0cfbd
k8s: fix manifests ( #5274 )
2024-09-10 11:05:54 -04:00
Kenneth Jenkins
3dadcf1825
add v0.27.0 changelog ( #5271 )
...
* add v0.27.0 changelog
* formatting, remove "New Contributors" section
* sort lines alphabetically
* accidentally deleted ':'s after category tags
* rm reverted pr #5159
---------
Co-authored-by: Denis Mishin <dmishin@pomerium.com>
2024-09-10 10:01:46 -04:00
Denis Mishin
bf30770c08
ci: update k8s manifests before v0.27.0 release ( #5270 )
...
Set image to `v0.27.0`
2024-09-10 10:01:11 -04:00
Joe Kralicky
653d8f9594
Revert "config: allow overriding port numbers using environment variables ( #5194 )" ( #5273 )
...
This reverts commit fdefcf9a16
2024-09-09 19:30:48 -04:00
Caleb Doxsey
dad954ae16
core/logging: change log.Error function ( #5251 )
...
* core/logging: change log.Error function
* use request id
2024-09-05 15:42:46 -06:00
Caleb Doxsey
97bf5edc54
core/ui: no-cache html, force back ( #5264 )
2024-09-05 10:39:50 -06:00
Caleb Doxsey
fb4ee25763
core/ui: update logo ( #5249 )
...
* update logo
* use base64
* reference local file
* use svg, resize
* purple logo
* bigger
* move logo
2024-09-05 18:13:06 +02:00
Denis Mishin
8a551e67bf
authorize: add request-id to error messages ( #5267 )
2024-09-05 11:54:37 -04:00
Caleb Doxsey
073d1564ba
core/envoy: allow TLS 1.3 ( #5263 )
2024-09-05 06:00:18 -06:00
Denis Mishin
ae584d02ed
zero/k8s: set externalTrafficPolicy: Local ( #5266 )
2024-09-04 22:26:07 -04:00
dependabot[bot]
c058b8a99c
chore(deps): bump the go group across 1 directory with 28 updates ( #5262 )
...
Bumps the go group with 20 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2 ) | `1.30.3` | `1.30.5` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) | `1.27.27` | `1.27.32` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) | `1.58.3` | `1.61.1` |
| [github.com/bits-and-blooms/bitset](https://github.com/bits-and-blooms/bitset ) | `1.13.0` | `1.14.2` |
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl ) | `1.3.9` | `1.4.0` |
| [github.com/docker/docker](https://github.com/docker/docker ) | `27.1.1+incompatible` | `27.2.0+incompatible` |
| [github.com/envoyproxy/go-control-plane](https://github.com/envoyproxy/go-control-plane ) | `0.12.1-0.20240717153332-b7af5b7dab54` | `0.13.0` |
| [github.com/google/btree](https://github.com/google/btree ) | `1.1.2` | `1.1.3` |
| [github.com/mholt/acmez/v2](https://github.com/mholt/acmez ) | `2.0.1` | `2.0.2` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go ) | `7.0.74` | `7.0.76` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ) | `0.67.1` | `0.68.0` |
| [github.com/ory/dockertest/v3](https://github.com/ory/dockertest ) | `3.10.0` | `3.11.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common ) | `0.55.0` | `0.58.0` |
| [github.com/rs/cors](https://github.com/rs/cors ) | `1.11.0` | `1.11.1` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [go.opentelemetry.io/otel/bridge/opencensus](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.28.0` | `1.29.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) | `0.190.0` | `0.196.0` |
Updates `github.com/aws/aws-sdk-go-v2` from 1.30.3 to 1.30.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.30.3...v1.30.5 )
Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.27 to 1.27.32
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.27.27...config/v1.27.32 )
Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.58.3 to 1.61.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.58.3...service/s3/v1.61.1 )
Updates `github.com/bits-and-blooms/bitset` from 1.13.0 to 1.14.2
- [Release notes](https://github.com/bits-and-blooms/bitset/releases )
- [Commits](https://github.com/bits-and-blooms/bitset/compare/v1.13.0...v1.14.2 )
Updates `github.com/cloudflare/circl` from 1.3.9 to 1.4.0
- [Release notes](https://github.com/cloudflare/circl/releases )
- [Commits](https://github.com/cloudflare/circl/compare/v1.3.9...v1.4.0 )
Updates `github.com/docker/docker` from 27.1.1+incompatible to 27.2.0+incompatible
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v27.1.1...v27.2.0 )
Updates `github.com/envoyproxy/go-control-plane` from 0.12.1-0.20240717153332-b7af5b7dab54 to 0.13.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases )
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md )
- [Commits](https://github.com/envoyproxy/go-control-plane/commits/v0.13.0 )
Updates `github.com/google/btree` from 1.1.2 to 1.1.3
- [Commits](https://github.com/google/btree/compare/v1.1.2...v1.1.3 )
Updates `github.com/mholt/acmez/v2` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/mholt/acmez/releases )
- [Commits](https://github.com/mholt/acmez/compare/v2.0.1...v2.0.2 )
Updates `github.com/minio/minio-go/v7` from 7.0.74 to 7.0.76
- [Release notes](https://github.com/minio/minio-go/releases )
- [Commits](https://github.com/minio/minio-go/compare/v7.0.74...v7.0.76 )
Updates `github.com/open-policy-agent/opa` from 0.67.1 to 0.68.0
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.67.1...v0.68.0 )
Updates `github.com/ory/dockertest/v3` from 3.10.0 to 3.11.0
- [Release notes](https://github.com/ory/dockertest/releases )
- [Commits](https://github.com/ory/dockertest/compare/v3.10.0...v3.11.0 )
Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.20.2
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.19.1...v1.20.2 )
Updates `github.com/prometheus/common` from 0.55.0 to 0.58.0
- [Release notes](https://github.com/prometheus/common/releases )
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md )
- [Commits](https://github.com/prometheus/common/compare/v0.55.0...v0.58.0 )
Updates `github.com/rs/cors` from 1.11.0 to 1.11.1
- [Commits](https://github.com/rs/cors/compare/v1.11.0...v1.11.1 )
Updates `go.opentelemetry.io/otel` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/bridge/opencensus` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/metric` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.28.0...v1.29.0 )
Updates `golang.org/x/sys` from 0.23.0 to 0.24.0
- [Commits](https://github.com/golang/sys/compare/v0.23.0...v0.24.0 )
Updates `google.golang.org/api` from 0.190.0 to 0.196.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.190.0...v0.196.0 )
Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20240903143218-8af14fe29dc1
- [Commits](https://github.com/googleapis/go-genproto/commits )
Updates `google.golang.org/grpc` from 1.65.0 to 1.66.0
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.65.0...v1.66.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/bits-and-blooms/bitset
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/cloudflare/circl
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/envoyproxy/go-control-plane
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/google/btree
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/mholt/acmez/v2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/minio/minio-go/v7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: github.com/open-policy-agent/opa
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/ory/dockertest/v3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/prometheus/common
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: github.com/rs/cors
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: go.opentelemetry.io/otel
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/bridge/opencensus
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/metric
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk/metric
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/sys
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-04 15:47:43 -06:00
Kenneth Jenkins
014824b525
proxy: deprecate the /.pomerium/jwt endpoint ( #5254 )
...
Disable the /.pomerium/jwt endpoint by default. Add a runtime flag to
temporarily opt out of the deprecation.
2024-09-04 11:22:18 -07:00
Kenneth Jenkins
2b84111058
config: sort runtime flags, name consistency ( #5255 )
...
Sort the runtime flag definitions alphabetically. Rename
envoy_resource_manager_enabled to just envoy_resource_manager for
consistency with the other flag names. (This flag hasn't been released
yet, so it should be OK to rename it.) Also add a doc comment.
2024-09-03 13:37:19 -07:00
dependabot[bot]
7c39084278
chore(deps): bump github.com/opencontainers/runc from 1.1.12 to 1.1.14 ( #5261 )
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.12 to 1.1.14.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.12...v1.1.14 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-03 13:14:00 -07:00
Denis Mishin
ce12e51cf5
zero/api: reset token and url cache if 401 is received ( #5256 )
...
zero/api: reset token cache if 401 is received
2024-09-03 15:40:28 -04:00
