Commit graph

1790 commits

Author SHA1 Message Date
backport-actions-token[bot]
9089212517
docs: update codeowners (#2451) (#2506)
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-08-20 22:18:13 +00:00
backport-actions-token[bot]
7dd89fdba2
Auth0 Doc Refresh (#2494) (#2500)
* update auth0 images

* update auth0 guide

* rm whitespace

* add 3rd-party warning

* Update docs/docs/identity-providers/auth0.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* move title to top

* table cleanup

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-20 12:54:33 -07:00
backport-actions-token[bot]
22131ab4c9
update Azure IdP doc (#2498) (#2501)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-08-20 09:59:07 -07:00
backport-actions-token[bot]
972497a32c
Update IdP Overview Page (#2493) (#2502)
* save dex-freeipa content in unpublished doc

* remove dex/freeIPA content, refresh IdP overview

* rm whitespace

* Update docs/docs/identity-providers/readme.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/docs/identity-providers/readme.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* copy edits

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-20 09:58:58 -07:00
backport-actions-token[bot]
18e481d76e
document binding service to 443 (#2487) (#2499)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-08-19 21:37:33 -07:00
backport-actions-token[bot]
00a3911a50
Update Okta IdP doc (#2491) (#2495)
* update Okta idp doc

* optimize pngs
reorganize pngs
fix typos

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-08-19 16:12:55 -07:00
backport-actions-token[bot]
476231c7e0
adjust comment blocking (#2488) (#2489)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-08-17 17:16:04 -07:00
Alex Fornuto
1164e10b48
Update Docker Quickstart (#2482) (#2486)
* Implement partial files

* fix markdown link

* Update Quickstart Doc

This update simplifies the quickstart process by assuming a local test environment without a TLS solution or a FQDN

* add TLS warning

* point to local verify container

* rm empty file

* reference Certificate topic page instructions

* update mkcert instructions

* Update docs/docs/install/readme.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/partials/install-mkcert.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update examples/config/config.docker.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update examples/config/config.docker.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update examples/config/config.docker.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update examples/config/config.docker.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* review edits

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-17 11:13:24 -05:00
backport-actions-token[bot]
bd513a84df
replace bdd@pom with user@example (#2484) (#2485)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-08-16 18:05:27 -07:00
backport-actions-token[bot]
a6e11527aa
wrap header example values as inline code. (#2474) (#2479)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-08-16 15:24:06 -07:00
backport-actions-token[bot]
4684e11818
docs: clarify custom request header limitations (#2471) (#2472)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-13 14:09:50 -07:00
backport-actions-token[bot]
00c445dccd
Document moving routes (#2460) (#2466)
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-10 13:22:06 -04:00
backport-actions-token[bot]
b00cb5b142
Document tracing sample rate in console (#2461) (#2465)
* document tracing sample rate in console

* Update docs/enterprise/console-settings.yaml

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Alex Fornuto <alex@fornuto.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-08-09 19:24:28 -07:00
backport-actions-token[bot]
6177711233
docs: update enterprise helm instructions to use main repo (#2463) (#2464)
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-08-10 01:01:14 +00:00
backport-actions-token[bot]
6571f2fdae
chore(deps): bump github.com/go-redis/redis/v8 from 8.11.1 to 8.11.2 (#2455) (#2459)
Bumps [github.com/go-redis/redis/v8](https://github.com/go-redis/redis) from 8.11.1 to 8.11.2.
- [Release notes](https://github.com/go-redis/redis/releases)
- [Changelog](https://github.com/go-redis/redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-redis/redis/compare/v8.11.1...v8.11.2)

---
updated-dependencies:
- dependency-name: github.com/go-redis/redis/v8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-09 15:16:41 -04:00
backport-actions-token[bot]
66adbc320d
Enterprise Upgrade & Changelog Pages (#2453) (#2458)
* update enterprise reference source

* add upgrade and changelog pages

Co-authored-by: Alex Fornuto <alex@fornuto.com>
2021-08-09 10:57:21 -06:00
backport-actions-token[bot]
017f352489
Update binary install doc (#2447) (#2452)
* fix route block in example config

* Update binary install to include OS packages

* update references to policy docs

Co-authored-by: Alex Fornuto <alex@fornuto.com>
2021-08-06 12:44:32 -06:00
backport-actions-token[bot]
094eaa4b7f
docs: update branding, concepts (#2445) (#2449)
* Pomerium Enterprise not Pomerium Enterprise Console to be consistent.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* s/The Pomerium Enterprise/Pomerium Enterprise/g

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* update concepts

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* Update docs/enterprise/about.md

Co-authored-by: Alex Fornuto <alex@fornuto.com>

* Update docs/enterprise/concepts.md

Co-authored-by: Alex Fornuto <alex@fornuto.com>

Co-authored-by: Alex Fornuto <alex@fornuto.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: Alex Fornuto <alex@fornuto.com>
2021-08-06 16:14:27 +00:00
backport-actions-token[bot]
82f84365a9
options: remove refresh_cooldown, add allow_spdy to proto (#2446) (#2448)
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-08-06 16:08:27 +00:00
backport-actions-token[bot]
eb72d46858
specify expected audience in Console config (#2442) (#2444)
Co-authored-by: Alex Fornuto <alex@fornuto.com>
2021-08-05 17:12:50 -07:00
backport-actions-token[bot]
47d4140812
Hack the logo to point to the marketing site (#2441) (#2443)
Co-authored-by: Alex Fornuto <alex@fornuto.com>
2021-08-05 17:12:29 -07:00
backport-actions-token[bot]
56c303d843
docs: update branding (#2435) (#2440)
- add svg logos
- adjust colors
- add favicon
- remove outdated demo

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-04 20:14:16 -07:00
backport-actions-token[bot]
13a9d4fbfb
docs: update default version to v0.15 (#2437) (#2438)
* docs: update default version to v0.15

* Update docs/.vuepress/config.js

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-04 22:11:41 -04:00
Travis Groth
7692b2ac49
update v0.15 changelog (#2436) 2021-08-04 18:39:50 -07:00
wasaga
51ab7e6226
telemetry: add nonce and make explicit ack/nack (#2434) 2021-08-04 21:08:55 -04:00
Alex Fornuto
c9cbc11a8d
set signing_key between OSS and console when installing console (#2432) 2021-08-04 17:03:25 -05:00
Caleb Doxsey
0d3ef4564e
doc updates (#2433)
* remove reference to EdDSA, fix numbering, typo

* fix ppl example

* update jwt verification routes

* update kubernetes route

* update local oidc routes

* update mtls routes

* fix transmission policy

* policy -> routes

* update settings

* fix has

* update numbering
2021-08-04 15:00:31 -07:00
Alex Fornuto
5332a752d0
Enterprise Docs (#2390)
* install VuePress Plugin Tabs

https://www.npmjs.com/package/vuepress-plugin-tabs

* init Enterprise documentation section

* replace Vuepress tab plugin

now using https://github.com/superbiger/vuepress-plugin-tabs

* init Enterprise Quickstart

* block of enterprise doc updates

* Helm Quickstart Update (#2380)

* removed/fixed redundant or incorrect config

And some small copy edits

* Update docs/docs/quick-start/helm.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* init console with helm doc

* squash me

* codeblock fix

* init about page

* updates to Enterprise section

* consolidate on Postgres

* WIP helm updates

* update and align OS and Enterprise helm docs

* Enterprise settings docs (#2397)

* init console-specific reference docs files

* remove shortdoc for name

* init Enterprise Reference doc

* expanding Enterprise Reference

* init JS script for reference subpages

When reviewing please remember that I'm not a developer, be kind

* update script and apply

* remove errant dep

* document script and expand for CLI help output

* import pomerium-console_serve.yaml

In future iterations, this file should be sourced at build time as an artifact from the pomerium-console repo

* init new output file

* update script call and output

* fix anchor links

* BROKEN - import content from settings.yaml when dupe is true

* filtering WiP

* fix dupe script, more content

* replace if dupe with if not docs

* squash me

* squash me!

* add docs about PPL (#2404)

* squash meeeeee

* Update docs/enterprise/install/quickstart.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* symlink img dir from docs/reference

* squash mee

* update install reqs

* Fixed links throughout

* Update docs/enterprise/install/quickstart.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/install/quickstart.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* remove internal note

* - format python with black
- format js with prettier

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* optimize images with imageOptim

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* run prettier on config.js

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* concepts.md

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* update concepts

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* copy edits

* typo

* symlink img dir from docs/reference

* modify TLS section in quick-start

* rm whitespace

* add common links postamble

* block of updates

* block of updates

* updates with @travisgroth

* turtles all the way down

* more content

* import all the things

* fill out reports

* fill out reports

* fix file extension

* fix links

* crosslink PPL ref

* document embedded prometheus

* expand example

* update reqs

* document non-directory users

* typo fix

* update metrics_address

* fix broken links in example configs

* update examples for route syntax

* replaced required with deprecated

Note that I didn't link to the route reference because I'm unsure what link formats are accepted when this file is used elsewhere. The warning block below includes a link.

* update enterprise/about

* Update docs/enterprise/console-settings.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/console-settings.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* remove commented config lines

* update non-domain user section in concepts

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/about.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* add console route to OSS conf

* update enterprise settings copy from source file

* Update docs/enterprise/concepts.md

* Update reports reference

* merge conflict resolution

* update sourced doc content, fix whitespace

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-04 13:55:04 -05:00
Michael Aldridge
0b9f06b5ae
docs/reference: Clarify use of idp_service_account (#2431) 2021-08-04 10:42:57 -07:00
Caleb Doxsey
cc9962cca6
config: remove support for ed25519 signing keys (#2430) 2021-08-04 09:30:47 -06:00
bobby
c0f9de2a46
docs: clarify device identity, not state, via client certs (#2428)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-08-03 21:46:14 -04:00
Travis Groth
335925d94a
v0.15 release notes (#2409) 2021-08-03 21:36:48 -04:00
wasaga
204aa30b6e
telemetry: try guess hostname or external IP addr for metrics (#2412) 2021-08-03 18:10:14 -04:00
Caleb Doxsey
94eb3c1149
config: remove grpc server max connection age options (#2427)
* config: remove grpc server max connection age options

* remove docs
2021-08-03 09:39:48 -06:00
dependabot[bot]
56bbc31517
chore(deps): bump gopkg.in/auth0.v5 from 5.19.1 to 5.19.2 (#2422)
Bumps [gopkg.in/auth0.v5](https://github.com/go-auth0/auth0) from 5.19.1 to 5.19.2.
- [Release notes](https://github.com/go-auth0/auth0/releases)
- [Changelog](https://github.com/go-auth0/auth0/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-auth0/auth0/compare/v5.19.1...v5.19.2)

---
updated-dependencies:
- dependency-name: gopkg.in/auth0.v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-03 08:28:54 -04:00
Caleb Doxsey
5e2ca68e94
redis: increase timeout on test (#2425) 2021-08-02 17:11:33 -06:00
Caleb Doxsey
a64e5b5fa1
authorize: add sid to JWT claims (#2420)
* authorize: add sid to JWT claims

* fix import ordering
2021-08-02 16:11:05 -06:00
dependabot[bot]
97af64df60
chore(deps): bump github.com/shirou/gopsutil/v3 from 3.21.6 to 3.21.7 (#2414)
Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) from 3.21.6 to 3.21.7.
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](https://github.com/shirou/gopsutil/compare/v3.21.6...v3.21.7)

---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-02 14:01:28 -06:00
dependabot[bot]
251a33ff68
chore(deps): bump google.golang.org/api from 0.51.0 to 0.52.0 (#2415)
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.51.0 to 0.52.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.51.0...v0.52.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-02 13:38:35 -06:00
dependabot[bot]
796a963c4e
chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0-rc.1 to 3.0.0 (#2421)
* chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0-rc.1 to 3.0.0

Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.0-rc.1 to 3.0.0.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.0-rc.1...v3.0.0)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* go mod tidy

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-08-02 13:07:26 -06:00
dependabot[bot]
e5fb3d947b
chore(deps): bump github.com/prometheus/common from 0.29.0 to 0.30.0 (#2417)
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.29.0 to 0.30.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-02 12:57:42 -06:00
dependabot[bot]
8d7e9a1126
chore(deps): bump github.com/open-policy-agent/opa from 0.30.2 to 0.31.0 (#2416)
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.30.2 to 0.31.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.30.2...v0.31.0)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-02 12:55:44 -06:00
dependabot[bot]
63ffc6c2b8
chore(deps): bump github.com/go-redis/redis/v8 from 8.11.0 to 8.11.1 (#2413)
Bumps [github.com/go-redis/redis/v8](https://github.com/go-redis/redis) from 8.11.0 to 8.11.1.
- [Release notes](https://github.com/go-redis/redis/releases)
- [Changelog](https://github.com/go-redis/redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-redis/redis/compare/v8.11.0...v8.11.1)

---
updated-dependencies:
- dependency-name: github.com/go-redis/redis/v8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-02 12:55:06 -06:00
Caleb Doxsey
57c0c0a1bc
authorize: log additional session details (#2419) 2021-08-02 12:08:34 -06:00
Travis Groth
3c658714ac
build: add envoy files to make clean (#2411) 2021-07-30 12:47:22 -06:00
Caleb Doxsey
1a95036b8c
sessions: add impersonate_session_id, remove legacy impersonation (#2407)
* sessions: add impersonate_session_id, remove legacy impersonation

* show impersonated user details

* fix headers

* address feedback

* only check impersonate id on non-nil pbSession

* Revert "only check impersonate id on non-nil pbSession"

This reverts commit a6f7ca5abd.
2021-07-30 08:42:36 -06:00
bobby
2b6813dc95
docs: only secure schemes are supported (#2408)
* docs: only secure schemes are supported

https://pomerium-io.slack.com/archives/CK92MUAES/p1627615869000100?thread_ts=1627567572.143500&cid=CK92MUAES

* bring update to source file

Co-authored-by: alexfornuto <alex@fornuto.com>
2021-07-30 08:40:41 -06:00
Travis Groth
386fc6ef81
envoy: bump to 1.19 (#2392) 2021-07-29 19:13:24 -04:00
Alex Fornuto
834fa85058
Installation Docs Restructuring (#2406)
* rename quick-start as install, move Synology to guides

* add redirects

* expand redirects, rename installation to releases
2021-07-29 15:40:15 -05:00
Caleb Doxsey
3026efb5af
envoyconfig: improvements (#2402)
* add alpn function

* add comment

* address PR feedback
2021-07-27 16:44:15 -06:00