Alex Fornuto
64d8748251
document enterprise enrollment option ( #2994 )
2022-02-04 10:27:27 -06:00
Travis Groth
ec03a9ffcb
deployment: add nonroot release docker images ( #2997 )
2022-02-03 15:54:39 -05:00
Alex
62c55df1dc
DOCS: Clarify renaming of claims with underscores ( #2971 )
...
* Clarify renaming of claims with underscores
* copy edits
One to the proposed change, one to existing language
Co-authored-by: alexfornuto <afornuto@pomerium.com>
2022-02-02 12:27:33 -08:00
Alex Fornuto
710ce311dd
demo git over TCP tunnel ( #2901 )
...
* demo git over TCP tunnel
* add tip
* Apply suggestions from code review
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2022-02-01 11:50:51 -06:00
daethnir
af7bb21af5
Fix minor typo in gitlab.md ( #2984 )
2022-01-31 20:17:31 -08:00
bobby
8b755a36b3
Update enterprise changelog for v0.16.0 ( #2977 )
...
* Update enterprise changelog for v0.16.0
* fmt
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
* Update upgrading.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2022-01-28 15:23:22 -08:00
Alex Fornuto
7fbf0e522c
Docs: Rewrite Istio Guide for Ingress Controller ( #2943 )
...
* istio rewrite, 90%
* complete istio rewrite
* Apply suggestions from code review
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* fix indentation
* precommit
* Apply suggestions from code review
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* add & fix glossary links
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2022-01-26 14:35:56 -06:00
Alex Fornuto
d1b9b29c85
DOCS: New page: Glossary ( #2897 )
...
* first draft of glossary
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* add crosslinks and external references
* Apply suggestions from code review
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
* adjust id-aware proxy link
* rm hyphen
* replace id-aware with context-aware proxy
* update keywords
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2022-01-25 16:41:48 -06:00
Alex Fornuto
eead7cf620
clarify base path for idp_provider_url ( #2956 )
2022-01-24 13:01:57 -05:00
Alex Fornuto
b35c9d3048
copy refresh ( #2933 )
2022-01-24 12:47:50 -05:00
bobby
20902a715e
Update security.md ( #2959 )
...
Unfortunately, it looks like all the low-effort security reports we get are coming from this list. Many times, the "researcher" is actually reporting a vulnerability on their own machine (foo.localhost.pomerium.io).
https://github.com/sushiwushi/bug-bounty-dorks/blob/master/dorks.txt#L70
2022-01-23 17:26:09 -08:00
Alex Fornuto
5bf912cf55
add More Resources section ( #2947 )
2022-01-19 07:13:02 -08:00
Alex Fornuto
fa8e68260b
Update cache to databroker ( #2932 )
2022-01-18 13:03:41 -06:00
Denis Mishin
1b80aa6c52
document service_proxy_upstream ingress annotation ( #2915 )
2022-01-12 10:15:55 -06:00
Alex Fornuto
64d50613af
DOCS: keyword tag updates ( #2922 )
...
* replace "zero-trust" with "zero trust"
* fix and update all keyword tags
2022-01-11 12:36:47 -06:00
Jorge L. Fatta
3c87751c41
docs: fix argo link ( #2918 )
2022-01-11 10:48:26 -06:00
Alex Fornuto
8b531b8cf9
update and align reference settings ( #2905 )
2022-01-07 12:28:42 -08:00
Alex Fornuto
3913aac581
fix references to common traffic patterns ( #2906 )
2022-01-07 13:35:03 -06:00
Alex
5d34cad553
Remove references to idp_provider_url for Google. ( #2882 )
...
* Remove references to idp_provider_url for Google. Closes #2866
* replace google with Okta in nginx docker example
Co-authored-by: alexfornuto <alex@fornuto.com>
2022-01-07 11:21:01 -06:00
Alex Fornuto
d864aa64e5
DOCS: GitLab Integration guide ( #2800 )
...
* WiP draft of GitLab Integration guide
* fix multiline docker command
* more steps
* complete guide
* add GitLab to Guides index
* add splash frame to video
* rewrite GitLab guide based on tech review
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* reduce complexity, note additional config
* rm whitespace
* Apply suggestions from code review
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
* fix indent for numbering
* Update docs/guides/gitlab.md
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2022-01-05 13:48:07 -06:00
Alex Fornuto
82217bac6b
fix links, rm errant formatting attempt ( #2888 )
2022-01-03 14:33:06 -06:00
Alex Fornuto
21ef7e161c
add link to background page ( #2883 )
2021-12-31 13:56:03 -08:00
Alex Fornuto
1e7eded292
Docs: Mutual Auth Topic page ( #2820 )
...
* WIP update
* init mutual auth topic page
* WIP
* update JWT verification guide
* s/Java/Json/g
* Add mTLS and update some charts
* resummarize
* get my updates in before Bobby gets here
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* finish updates
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* adjust styling for HRs and blockquotes
* mutual auth overhaul
* grammar adjustment
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* remove new blockquote style
* manual review updates
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-12-30 16:06:33 -06:00
Alex Fornuto
9883cfd72d
fixes broken links, adds checker workarounds ( #2878 )
2021-12-30 15:02:06 -06:00
Alex Fornuto
9b5a816246
DOCS: Remove duplicate configuration items ( #2873 )
...
Remove duplicate configuration items of route
Co-authored-by: cfanbo <haohtml@gmail.com>
2021-12-29 15:18:10 -06:00
Alex Fornuto
76ae96980a
DOCS: Fixes to 16 release ( #2856 )
...
* clarify upgrade notes and certificate reference
* backport updated reference to source and sort
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* update webauthn link
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-12-29 12:12:33 -06:00
Alex Fornuto
eab9b960bf
Rephrase Discussion around Discuss ( #2870 )
...
* rephrase discussion around Discuss
* rm whitespace
2021-12-29 12:11:11 -06:00
Alex Fornuto
f65041ebd1
DOCS: Document webauthn with device ID ( #2830 )
...
* init device identity topic page
* add device options to PPL
* init device enrollment guide
* adjust for #2835 and crosslink
* tooltip in PPL on finding device ID
* sort and link matchers
* adjust terminology and crosslink
* standardize new topic name
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* rewrite device identity topic page
* rebase cleanup
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* add links from review with footer refs
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* rm errant newlines
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-12-29 11:19:21 -06:00
Sylvain Rabot
727b8dd8ac
docs: fix generation of the public key ( #2864 )
...
Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
2021-12-28 20:27:25 -08:00
Sylvain Rabot
9c7cf05a13
Fix typo ( #2861 )
...
Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
2021-12-28 12:53:43 -06:00
Alex Fornuto
a95aa7cb77
DOCS: New Guide: Upstream mTLS ( #2814 )
...
* rename mtls.md to be client-side specific
* init upstream mTLS guide
* Apply suggestions from code review
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* clarify assumed config dir
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* link to before-you-begin anchor
* Update docs/guides/upstream-mtls.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-12-27 18:14:18 -06:00
Alex Fornuto
3bd73be534
Update mTLS guide ( #2788 )
...
* version 0.9 is old enough as to not warrant reference
* copy edits and formatting
* Consolidate 'before you begin' and warn that mkcert is for development.
* update and refresh
* add troubleshooting partial
* standardize img path for partial
* Apply suggestions from code review
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* clarify all route mtls config
* remove troubleshooting section
This commit requires that the PR **not** be backported, since the fix that negates this workaround will not be backported.
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-12-27 16:23:58 -06:00
Travis Groth
adb0727018
docs: update version menu for v0.16 ( #2847 )
2021-12-22 18:24:00 -05:00
Travis Groth
45a348de2a
docs: v0.16 release ( #2845 )
2021-12-22 18:04:43 -05:00
Denis Mishin
c19dd80fe6
more idp metrics ( #2842 )
2021-12-22 17:30:16 -05:00
Alex Fornuto
f48191fe45
DOCS: Create Consolidated Troubleshooting Guide and Replace FAQ ( #2797 )
...
* replace FAQ with troubleshooting
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* clarify JWT authentication issue
* elevate and clarify HSTS issue
* expand Set Response Header reference section
* Apply suggestions from code review
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
* capitalize Pomerium serivice names
* additional capitalization
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-12-21 12:33:01 -06:00
Denis Mishin
52920eaf72
add docs for ingress regex path ( #2822 )
2021-12-16 16:33:24 -05:00
Denis Mishin
41877e166b
fix typo in docs ( #2819 )
2021-12-13 16:48:51 -05:00
Caleb Doxsey
5a858f5d48
config: add internal service URLs ( #2801 )
...
* config: add internal service URLs
* maybe fix integration tests
* add docs
* fix integration tests
* for databroker connect to external name, but listen on internal name
* Update docs/reference/readme.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* Update docs/reference/readme.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* Update docs/reference/readme.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* Update docs/reference/settings.yaml
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* Update docs/reference/settings.yaml
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* Update docs/reference/settings.yaml
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-12-10 14:04:37 -05:00
Caleb Doxsey
2d04106e6d
ppl: add support for http_path and http_method ( #2813 )
...
* ppl: add support for http_path and http_method
* fix import ordering
2021-12-10 07:28:51 -07:00
Alex Fornuto
e03f8a00db
add Grafana to Guides index ( #2808 )
2021-12-07 16:34:50 -06:00
Alex Fornuto
ec22b07a4e
fix indentation ( #2798 )
2021-12-02 11:31:11 -08:00
Caleb Doxsey
bd0a5389bf
envoy: add support for bind_config bootstrap options ( #2772 )
...
* envoy: add support for bind_config bootstrap options
* only add upstream bind config options to individual policy clusters
* update docs for new Envoy keys
Co-authored-by: alexfornuto <alex@fornuto.com>
2021-12-01 13:02:49 -07:00
Travis Groth
1bfdae4e12
docs: update pomerium-cli location ( #2790 )
2021-12-01 15:00:11 -05:00
Alex Fornuto
e8e0305483
Docs: Update Kubernetes Dashboard Guide ( #2759 )
...
* update dashboard guide...
This new version takes advantage of the RBAC options the Pomerium Helm chart now makes available
* Update docs/guides/kubernetes-dashboard.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* edit intro para
* Apply suggestions from code review
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
* remvove numbered list of one
* Update docs/guides/kubernetes-dashboard.md
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
* typo correction
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-11-30 20:16:12 -06:00
Alex Fornuto
715d32259f
Docs: Update Securing Kubernetes Guide ( #2758 )
...
* Update Securing k8s for Ingress Controller (incomplete)
* enable apiProxy
* finish updated draft
* rm outdated cli install method
* Apply suggestions from code review
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* add skip tls verify
also rm errant indentation and break up some long commands
* Update docs/guides/kubernetes.md
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
* Update docs/guides/kubernetes.md
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-11-30 14:04:17 -06:00
Alex Fornuto
150862b7e6
Document Pomerium Policy Language ( #2784 )
...
* Init PPL doc
* copy edits
* Apply suggestions from code review
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* Update docs/docs/topics/ppl.md
* whitespace cleanup
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-11-29 17:13:48 -06:00
Alex Fornuto
f016981194
Docs: Update JWT Verification Guide ( #2746 )
...
* WIP update
* init mutual auth topic page
* WIP
* update JWT verification guide
* s/Java/Json/g
* remove Mutual Auth topic page and references
The new page will be reviewed and added as a separate PR
* fix JSON capitalization throughout
* copy edit to jwt-verification.md
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-11-29 15:11:39 -06:00
Caleb Doxsey
a8b76bd623
authorize: support X-Pomerium-Authorization in addition to Authorization ( #2780 )
...
* authorize: support X-Pomerium-Authorization in addition to Authorization
* tangentental correction
Co-authored-by: alexfornuto <alex@fornuto.com>
2021-11-29 12:19:14 -07:00
Alex Fornuto
88c5eeba45
coy edit to changelog entry ( #2786 )
2021-11-29 11:31:11 -06:00
