3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-08-06 10:21:05 +02:00
Code Issues Projects Releases Packages Wiki Activity
2309 commits 173 branches 133 tags 112 MiB
Commit graph

333 commits

Author SHA1 Message Date
Alex Fornuto
1bb07479db
Docs: Document TCP routes in Kubernetes (#3341) 
documents TCP routes with Pomerium Ingress Controller
 2022-05-12 10:01:53 -07:00
Alex Fornuto
ad8915457e
DOCS: Update Annotations Table (#3340) 
* update annotations table

* clarify header overlap
 2022-05-12 11:46:51 -05:00
imlonghao
2b819b37f1
docs: fix a typo in auth0 config example (#3332) 2022-05-09 09:43:15 -06:00
Alex Fornuto
8708949ff1
link helm doc to ingress controller doc (#3326) 2022-05-05 16:41:33 -04:00
Thomas John Wesolowski
5fff3c3a7a
Update docs for supported Ingress annotations (#3310) 
Signed-off-by: TJ Wesolowski <wojoinc@pm.me>
 2022-05-05 10:22:12 -04:00
Alex Fornuto
a5148c3b9e
DOCS: Update changelog (#3301) 
* update changelog

* Update docs/docs/CHANGELOG.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
 2022-04-29 10:32:59 -05:00
Alex Fornuto
eda30cbf86
add device identity video (#3304) 2022-04-29 10:20:46 -05:00
Alex Fornuto
387c0255ab
DOCS: Define stateless (#3228) 
* define stateless

* link to glossary
 2022-04-04 19:21:54 -05:00
Sara Jarjoura - Sensible
b83bb8f2f7
feat(docs) Add Redis FLUSHALL doc on how and when to execute commands (#3192) 
* feat(docs) Add Redis FLUSHALL doc on how and when to execute commands

* fix(docs) Move flushall command to troubleshooting section

* copy edits

* crosslink

Co-authored-by: alexfornuto <afornuto@pomerium.com>
 2022-03-30 10:11:32 -05:00
Alex Fornuto
8b31c99d24
expand shared_secret troubleshooting (#3193) 2022-03-28 15:59:09 -05:00
Alex Fornuto
666b57522a
DOCS: Production Deployment rewrite (#3129) 
* sort and consolidate service url keys

* Production doc first pass

* move Production Deployment to top level

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/docs/production-deployment.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
 2022-03-28 09:10:49 -05:00
Alex Fornuto
956febf6a6
DOCS: Add New Videos to Docs Pages (#3177) 
* limit related to our videos

* add install demo to install index

* add intro video to landing page
 2022-03-23 00:05:43 -05:00
Alex Fornuto
b5ce4c7d5d
update Desktop Client docs (#3117) 2022-03-22 12:56:22 -05:00
Alex Fornuto
b41ebd36cb
DOCS: Securing Pomerium (#3123) 
* init Securing Pomerium page

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
 2022-03-22 12:42:45 -05:00
Alex Fornuto
f7d36c3f1d
Docs: document default cert annotation. (#3076) 2022-03-21 17:09:54 -04:00
Alex Fornuto
b8cbb93425
Docs: Google IDP without Service Account (#3149) 
* document config file keys

* document service account error

* add commented service account key

* Apply suggestions from code review
 2022-03-17 08:50:13 -07:00
Alex Fornuto
96cfd0b2c4
DOCS: TCP route for Microsoft SQL (#3126) 
* example TCP route for Microsoft SQL

* note pre-existing route on ms-sql example
 2022-03-11 13:15:23 -06:00
George Ornbo
7c6580b66b
Add missing namespace creation for pomerium (#3099) 
* Add missing namespace creation for pomerium

The namespace for pomerium is not created during the walkthrough so running the command to create the tls secret fails.

``` bash
% kubectl create secret tls pomerium-tls-ca --namespace=pomerium \
--cert="$(mkcert -CAROOT)/rootCA.pem" --key="$(mkcert -CAROOT)/rootCA-key.pem"
error: failed to create secret namespaces "pomerium" not found
```
This PR adds the creation of the namespace before running the tls secret command.

* move namespace creation cmd to prereqs

Co-authored-by: alexfornuto <afornuto@pomerium.com>
 2022-03-10 20:38:34 -08:00
Alex Fornuto
c0c61c0a23
DOCS: Auth0 JWT signature algorithm (#3130) 2022-03-10 13:42:10 -05:00
Alex Fornuto
ce4780e15c
note assumed TCP route on all examples (#3127) 2022-03-10 12:29:15 -06:00
Alex Fornuto
a91f616edd
Clarify configuration between modes (#3111) 
* Clarify configuration between modes

* Update docs/reference/settings.yaml

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
 2022-03-09 14:21:19 -06:00
George Ornbo
1df1b8bc10
Correct domain name (#3100) 
* Correct domain name 

hello.localhost.pomerium.com has no dns record associated with it so won't work without hacking `/etc/hosts`
The walkthrough also issues certificates to `*.localhost.pomerium.io`

* expand and clarify use of localhost.pomerium.io

Co-authored-by: alexfornuto <afornuto@pomerium.com>
 2022-03-08 15:34:52 -06:00
Alex Fornuto
dfcb724f48
Docs: Update Okta Copy (#3074) 
* update Okta copy

* Update docs/docs/identity-providers/okta.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Clarifications

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
 2022-03-08 15:07:00 -06:00
Alex Fornuto
01391a6055
Docs: Ingress routing order (#3077) 
* document routing order

* Update docs/docs/k8s/ingress.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

* Update docs/docs/k8s/ingress.md

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
 2022-03-08 14:32:39 -06:00
Travis Groth
5ee6d4a023
docs: Update release notes and changelog for v0.17 (#3097) 2022-03-04 15:54:48 -05:00
Alex Fornuto
d1e784efa9
DOCS: Standardize Reference image paths in Enterprise Docs (#3080) 
* copy enterprise reference image to core reference img dir

* standardize reference image path

* link fixes
 2022-02-25 09:38:35 -06:00
Alex Fornuto
f0843d6f44
various link fixes (#3049) 2022-02-18 11:19:02 -06:00
Alex Fornuto
7140562a82
updates examples for current routes/policy keys (#3034) 
* updates examples for current routes/policy keys

* fix and prettier
 2022-02-16 14:06:52 -06:00
Travis Groth
0b0fba06b3
ci: rename master to main (#3045) 
Co-authored-by: alexfornuto <afornuto@pomerium.com>
 2022-02-15 16:02:40 -05:00
Alex Fornuto
b74dd84090
rm prompts in code example (#3003) 
replaced with line highlighting to separate input from output
 2022-02-15 12:44:41 -06:00
Alex Fornuto
ab0b674b80
update Enterprise docs for 0.16.0 (#2993) 
* update Enterprise docs for 0.16.0

* Update docs/enterprise/upgrading.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* more docs, plus cross-links

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
 2022-02-11 11:06:54 -06:00
Travis Groth
1b179139be
deployment: add debug image for all releases (#3001) 2022-02-08 07:27:43 -05:00
Travis Groth
ec03a9ffcb
deployment: add nonroot release docker images (#2997) 2022-02-03 15:54:39 -05:00
Alex Fornuto
710ce311dd
demo git over TCP tunnel (#2901) 
* demo git over TCP tunnel

* add tip

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
 2022-02-01 11:50:51 -06:00
Alex Fornuto
7fbf0e522c
Docs: Rewrite Istio Guide for Ingress Controller (#2943) 
* istio rewrite, 90%

* complete istio rewrite

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* fix indentation

* precommit

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* add & fix glossary links

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
 2022-01-26 14:35:56 -06:00
Alex Fornuto
d1b9b29c85
DOCS: New page: Glossary (#2897) 
* first draft of glossary

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* add crosslinks and external references

* Apply suggestions from code review

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

* adjust id-aware proxy link

* rm hyphen

* replace id-aware with context-aware proxy

* update keywords

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
 2022-01-25 16:41:48 -06:00
bobby
20902a715e
Update security.md (#2959) 
Unfortunately, it looks like all the low-effort security reports we get are coming from this list. Many times, the "researcher" is actually reporting a vulnerability on their own machine (foo.localhost.pomerium.io). 

https://github.com/sushiwushi/bug-bounty-dorks/blob/master/dorks.txt#L70
 2022-01-23 17:26:09 -08:00
Alex Fornuto
fa8e68260b
Update cache to databroker (#2932) 2022-01-18 13:03:41 -06:00
Denis Mishin
1b80aa6c52
document service_proxy_upstream ingress annotation (#2915) 2022-01-12 10:15:55 -06:00
Alex Fornuto
64d50613af
DOCS: keyword tag updates (#2922) 
* replace "zero-trust" with "zero trust"

* fix and update all keyword tags
 2022-01-11 12:36:47 -06:00
Alex Fornuto
3913aac581
fix references to common traffic patterns (#2906) 2022-01-07 13:35:03 -06:00
Alex
5d34cad553
Remove references to idp_provider_url for Google. (#2882) 
* Remove references to idp_provider_url for Google. Closes #2866

* replace google with Okta in nginx docker example

Co-authored-by: alexfornuto <alex@fornuto.com>
 2022-01-07 11:21:01 -06:00
Alex Fornuto
82217bac6b
fix links, rm errant formatting attempt (#2888) 2022-01-03 14:33:06 -06:00
Alex Fornuto
21ef7e161c
add link to background page (#2883) 2021-12-31 13:56:03 -08:00
Alex Fornuto
1e7eded292
Docs: Mutual Auth Topic page (#2820) 
* WIP update

* init mutual auth topic page

* WIP

* update JWT verification guide

* s/Java/Json/g

* Add mTLS and update some charts

* resummarize

* get my updates in before Bobby gets here

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* finish updates

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* adjust styling for HRs and blockquotes

* mutual auth overhaul

* grammar adjustment

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* remove new blockquote style

* manual review updates

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
 2021-12-30 16:06:33 -06:00
Alex Fornuto
9883cfd72d
fixes broken links, adds checker workarounds (#2878) 2021-12-30 15:02:06 -06:00
Alex Fornuto
76ae96980a
DOCS: Fixes to 16 release (#2856) 
* clarify upgrade notes and certificate reference

* backport updated reference to source and sort

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* update webauthn link

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
 2021-12-29 12:12:33 -06:00
Alex Fornuto
eab9b960bf
Rephrase Discussion around Discuss (#2870) 
* rephrase discussion around Discuss

* rm whitespace
 2021-12-29 12:11:11 -06:00
Alex Fornuto
f65041ebd1
DOCS: Document webauthn with device ID (#2830) 
* init device identity topic page

* add device options to PPL

* init device enrollment guide

* adjust for #2835 and crosslink

* tooltip in PPL on finding device ID

* sort and link matchers

* adjust terminology and crosslink

* standardize new topic name

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* rewrite device identity topic page

* rebase cleanup

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* add links from review with footer refs

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* rm errant newlines

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
 2021-12-29 11:19:21 -06:00
Sylvain Rabot
727b8dd8ac
docs: fix generation of the public key (#2864) 
Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
 2021-12-28 20:27:25 -08:00