3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-08-13 09:18:40 +02:00
Code Issues Projects Releases Packages Wiki Activity
3288 commits 178 branches 133 tags 112 MiB
Commit graph

33 commits

Author SHA1 Message Date
Denis Mishin
bf1cd0aa18
 		authorize: build evaluators cache in parallel () 
* authorize: build evaluators cache in parallel

* session: add unit tests for gRPC wrapper methods ()

* core/config: add support for maps in environments ()

* reconciler: allow custom comparison function ()

* add loopvar alias

---------

Co-authored-by: Kenneth Jenkins <51246568+kenjenkins@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
 2023-11-09 11:49:34 -05:00
Denis Mishin
bfcc970839
 		databroker: build config concurrently, option to bypass validation () 
* validation: option to bypass

* concurrently build config

* add regex_priority_order and route sorting

* rm mutex
 2023-11-06 13:21:29 -05:00
Caleb Doxsey
53573dc046
 		core/config: remove version () 
* core/config: remove version

* lint

* fix
 2023-11-01 10:19:55 -06:00
Caleb Doxsey
ae420f01c6
 		core/config: add config version, additional telemetry () 
* core/config: add config version, additional telemetry

* typo
 2023-10-27 15:16:40 -06:00
Caleb Doxsey
baf964f44a
 		config: update logic for checking overlapping certificates () 
* config: update logic for checking overlapping certificates

* add test

* go mod tidy
 2023-06-01 09:30:46 -06:00
Caleb Doxsey
10662d7034
 		databroker: fix fast forward () 
* databroker: sort configs

* databroker: fix fast-forward

* newest not oldest
 2023-05-23 15:30:27 -06:00
Caleb Doxsey
fe8e788076
 		databroker: sort configs () 2023-05-23 10:08:29 -06:00
Caleb Doxsey
bbed421cd8
 		config: remove source, remove deadcode, fix linting issues () 
* remove source, remove deadcode, fix linting issues

* use github action for lint

* fix missing envoy
 2023-04-21 17:25:11 -06:00
Caleb Doxsey
761c17b8ac
 		grpc: wait for connect to be ready before making calls () 
* grpc: wait for connect to be ready before making calls

* make sure to stop the ticker
 2022-04-08 12:18:52 -06:00
Caleb Doxsey
1238f0506d
 		databroker: add additional log for config source () 2021-10-27 13:02:37 -06:00
Denis Mishin
30664cd307
 		skip configuration updates to the most recent one () 2021-10-21 11:03:26 -04:00
Caleb Doxsey
f5a558d4a0
 		grpc: disable gRPC connection re-use across services () 2021-08-24 11:47:16 -06:00
Caleb Doxsey
bbec2cae9f
 		grpc: send client traffic through envoy () 
* wip

* wip

* handle wildcards in override name

* remove wait for ready, add comment about sync, force initial sync complete in test

* address comments
 2021-08-16 16:12:22 -06:00
wasaga
41a2622736
 		certs: reject certs from databroker if they conflict with local () 2021-06-24 18:40:59 -04:00
Caleb Doxsey
0adbf4f24c
 		controlplane: save configuration events to databroker () 
* envoy: save events to databroker

* controlplane: add tests for envoy configuration events

* format imports
 2021-04-29 15:51:46 -06:00
Caleb Doxsey
b1d62bb541
 		config: remove validate side effects () 
* config: default shared key

* handle additional errors

* update grpc addr and grpc insecure

* update google cloud service authentication service account

* fix set response headers

* fix qps

* fix test
 2021-04-22 15:10:50 -06:00
wasaga
e0c09a0998
 		log context () 2021-04-22 10:58:13 -04:00
wasaga
a935c1ba30
 		config related metrics () 2021-04-07 12:29:36 -07:00
Caleb Doxsey
d7ab817de7
 		authorize: add databroker server and record version to result, force sync via polling () 
* authorize: add databroker server and record version to result, force sync via polling

* wrap inmem store to take read lock when grabbing databroker versions

* address code review comments

* reset max to 0
 2021-03-31 10:09:06 -06:00
Caleb Doxsey
f396c2a0f7
 		config: log config source changes () 
* config: log config source changes

* use internal log import
 2021-03-03 09:54:08 -07:00
Caleb Doxsey
664358dfad
 		config: multiple endpoints for authorize and databroker () 
* wip

* update docs

* remove dead code
 2021-03-03 09:53:19 -07:00
Caleb Doxsey
5d60cff21e
 		databroker: refactor databroker to sync all changes () 
* refactor backend, implement encrypted store

* refactor in-memory store

* wip

* wip

* wip

* add syncer test

* fix redis expiry

* fix linting issues

* fix test by skipping non-config records

* fix backoff import

* fix init issues

* fix query

* wait for initial sync before starting directory sync

* add type to SyncLatest

* add more log messages, fix deadlock in in-memory store, always return server version from SyncLatest

* update sync types and tests

* add redis tests

* skip macos in github actions

* add comments to proto

* split getBackend into separate methods

* handle errors in initVersion

* return different error for not found vs other errors in get

* use exponential backoff for redis transaction retry

* rename raw to result

* use context instead of close channel

* store type urls as constants in databroker

* use timestampb instead of ptypes

* fix group merging not waiting

* change locked names

* update GetAll to return latest record version

* add method to grpcutil to get the type url for a protobuf type
 2021-02-18 15:24:33 -07:00
wasaga
67f6030e1e
 		upstream endpoints load balancer weights () 2021-01-28 09:11:14 -05:00
Caleb Doxsey
84e8f6cc05
 		config: fix databroker policies () 2021-01-25 17:18:50 -07:00
bobby
f837c92741
 		dev: update linter () 
- gofumpt everything
- fix TLS MinVersion to be at least 1.2
- add octal syntax
- remove newlines
- fix potential decompression bomb in ecjson
- remove implicit memory aliasing in for loops.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
 2020-12-30 09:02:57 -08:00
bobby
652e8bb3d3
 		deps: update hashstructure v2 () 
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
 2020-11-30 16:53:21 -08:00
Caleb Doxsey
eb79cc0957
 		databroker: require JWT for access () 2020-10-09 11:08:40 -06:00
Caleb Doxsey
49d1a71ff2
 		databroker: add tracing for rego evaluation and databroker sync, fix bug in databroker config source () 2020-09-03 08:11:34 -06:00
Caleb Doxsey
bd5c784670
 		config: validate databroker settings () 
* config: validate databroker settings

* fix test
 2020-08-12 11:32:34 -06:00
Caleb Doxsey
1285a9d91d
 		databroker: add support for config settings () 2020-08-11 07:50:19 -06:00
Caleb Doxsey
557aef2a33
 		fix databroker restart versioning, handle missing sessions () 
* fix databroker restart versioning, handle missing sessions

* send empty server version to detect change

* only rebuild if there are updated records
 2020-07-29 08:45:41 -06:00
Caleb Doxsey
504197d83b
 		custom rego in databroker () 
* add support for sub policies

* add support for sub policies

* update authz rego policy to support sub policies
 2020-07-22 10:44:05 -06:00
Caleb Doxsey
b79e73b8b8
 		config: add support for policies stored in the databroker () 
* wip

* always use databroker config source

* add test

* valid policy, remove debug lines
 2020-07-17 10:35:29 -06:00