Commit graph

1567 commits

Author SHA1 Message Date
Travis Groth
848e51f7ee
deps: bump envoy to v0.17.4 (#2535) 2021-08-26 13:46:30 -04:00
backport-actions-token[bot]
e73c678686
docs: only secure schemes are supported (#2408) (#2410)
* docs: only secure schemes are supported

https://pomerium-io.slack.com/archives/CK92MUAES/p1627615869000100?thread_ts=1627567572.143500&cid=CK92MUAES

* bring update to source file

Co-authored-by: alexfornuto <alex@fornuto.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: alexfornuto <alex@fornuto.com>
2021-07-30 09:36:46 -07:00
github-actions[bot]
96700d4d94
Docs bug fixes (#2362) (#2364)
* close warning block, syntax highlight

* Add title, grammar-fix link

Co-authored-by: Alex Fornuto <alex@fornuto.com>
2021-07-16 21:20:12 +00:00
Travis Groth
cf4da92f5d
chore(deps): upgrade kind action to v1.2.0 (#2331) (#2366) 2021-07-15 10:48:18 -04:00
Alex Fornuto
7e55f51738
Docs backporting (#2351)
* fix Transmission sorting in sidebar

* rename VSCode Server for alphabetizing and clarity

* Transmission BitTorrent Client Guide (#2281)

* init transmission guide

* Update docs/guides/transmission.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/guides/transmission.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/guides/transmission.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* update installation source for mkcert (#2340)

* Docs sorting (#2346)

* fix Transmission sorting in sidebar

* rename VSCode Server for alphabetizing and clarity

* capitalize Pomerium

* Update docs/guides/code-server.md

Co-authored-by: Joe Previte <jjprevite@gmail.com>

* fix naming and sorting for coder-server, add description

Co-authored-by: Joe Previte <jjprevite@gmail.com>

* Docs sorting (#2346)

* fix Transmission sorting in sidebar

* rename VSCode Server for alphabetizing and clarity

* capitalize Pomerium

* Update docs/guides/code-server.md

Co-authored-by: Joe Previte <jjprevite@gmail.com>

* fix naming and sorting for coder-server, add description

Co-authored-by: Joe Previte <jjprevite@gmail.com>

* fix code-server title

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: Joe Previte <jjprevite@gmail.com>
2021-07-12 08:51:08 -07:00
github-actions[bot]
52ec748836
docs: google gcp / workspace instructions (#2272) (#2350)
Deferential to Google's own docs since they keep changing the screens.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-07-09 14:20:07 -07:00
github-actions[bot]
e5d4c824de
directory/azure: add paging support to user group members call (#2311) (#2312)
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-06-24 15:43:51 +00:00
Caleb Doxsey
88e1458404
authorize: only redirect for HTML pages (#2264) (#2298)
* authorize: only redirect for HTML pages

* authorize: only redirect for HTML pages
2021-06-16 12:15:30 -06:00
github-actions[bot]
45a9a1843c
envoy: fix usage of codec_type with alpn (#2277) (#2278)
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-06-07 21:11:27 +00:00
wasaga
2ad3a67392
jwt: round timestamps (#2260) 2021-06-01 15:30:04 -04:00
github-actions[bot]
71a05d6774
docs: update helm values for chart v20.0.0 (#2242) (#2244)
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-05-27 21:17:55 -04:00
github-actions[bot]
601d0788c1
Update _redirects (#2237) (#2238)
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-05-25 04:59:58 +00:00
Caleb Doxsey
fd0638c10c
authorize: add rego functions to custom evaluator (#2236) 2021-05-24 12:46:15 -06:00
Ben Potter
eeb5cd43df add support for latest version of code-server (#2229)
* add support for latest version of code-server

* golang version

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* golang version

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* install zip

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-05-21 10:47:13 -07:00
Joe Previte
9c477dd9e7 fix(docs): use correct name for code-server (#2223)
* fix: use correct name for code-server

* chore: update config.js for code-server

* chore: add redirect for code-server
2021-05-21 10:47:13 -07:00
Caleb Doxsey
897e7202bb
authorize: fix custom rego panic (#2226)
* fix custom rego panic

* fix type cast
2021-05-21 08:21:22 -06:00
Bobby DeSimone
cc4c400140 depedency: update /x/net
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-05-20 21:36:14 -07:00
github-actions[bot]
8bf389e077
envoy: add global response headers to local replies (#2217) (#2225)
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-05-21 02:48:36 +00:00
github-actions[bot]
479c0290d0
Update programmatic-access.md (#2190) (#2205)
* Update programmatic-access.md

tries to give a bit more context to the curl snippet to get a token for programmatic access

include bastion host remote port forwarding and some other notes

include headers in request mention

update programmatic access

Update programmatic-access.md

Update programmatic-access.md

update programmatic access

* fumpt

Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>

Co-authored-by: Joseph Chiocchi <input.output@gmail.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-05-17 09:30:00 -04:00
github-actions[bot]
fec57f47ae
Revert "authenticate,proxy: add same site lax to cookies (#2159)" (#2203) (#2204)
This reverts commit d9cc26a2e0.

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-05-17 03:39:31 +00:00
github-actions[bot]
5e408ed6ac
deps: bump envoy to v1.17.3 (#2198) (#2199)
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-05-13 13:54:58 +00:00
github-actions[bot]
3587d581fe
proxy / controplane: use old upstream cipher suite (#2196) (#2197)
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-05-12 23:17:57 +00:00
github-actions[bot]
a1d85c1c90
docs: add v0.14 feature highlights (#2183) (#2184)
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-05-08 21:18:40 +00:00
github-actions[bot]
4fff08cfab
docs: update slack link to vanity url (#2177) (#2178)
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-05-05 22:45:34 +00:00
Travis Groth
0071b4e7a5
docs: v0.14.0 (#2174) 2021-05-04 17:39:16 -04:00
Caleb Doxsey
aeece76928
databroker: store issued at timestamp with session (#2173) 2021-05-04 10:09:14 -06:00
Caleb Doxsey
69576cffe4
config: add support for set_response_headers in a policy (#2171)
* config: add support for set_response_headers in a policy

* docs: add note about precedence
2021-05-04 09:43:52 -06:00
wasaga
129df47f9c
xds extended event (#2158) 2021-05-03 12:28:11 -04:00
dependabot[bot]
b6984d4322
chore(deps): bump github.com/open-policy-agent/opa from 0.27.1 to 0.28.0 (#2165)
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.27.1 to 0.28.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.27.1...v0.28.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-03 10:19:25 -06:00
dependabot[bot]
6219b8f683
chore(deps): bump github.com/envoyproxy/protoc-gen-validate (#2166)
Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases)
- [Commits](https://github.com/envoyproxy/protoc-gen-validate/compare/v0.6.0...v0.6.1)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-03 10:19:04 -06:00
dependabot[bot]
5072cf0321
chore(deps): bump github.com/prometheus/common from 0.21.0 to 0.23.0 (#2167)
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.21.0 to 0.23.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.21.0...v0.23.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-03 10:18:47 -06:00
dependabot[bot]
f6658103f7
chore(deps): bump github.com/ory/dockertest/v3 from 3.6.3 to 3.6.5 (#2168)
Bumps [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) from 3.6.3 to 3.6.5.
- [Release notes](https://github.com/ory/dockertest/releases)
- [Commits](https://github.com/ory/dockertest/compare/v3.6.3...v3.6.5)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-03 10:18:23 -06:00
bobby
0e789aad6d
docs: add inline instructions to generate signing-key (#2164)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-05-03 09:06:40 -07:00
Caleb Doxsey
67592f2469
docs: add info note to set_response_headers (#2162)
* docs: add info note to set_response_headers

* use tip
2021-04-30 16:13:15 -06:00
Caleb Doxsey
b5b1013947
config: add client_crl (#2157)
* config: add client_crl

* address comments

* add ignored file
2021-04-30 14:36:32 -06:00
Travis Groth
a43d666d56
ci: remove codecov (#2161) 2021-04-30 12:37:40 -07:00
Travis Groth
dae1836dff
internal/envoy: always extract envoy (#2160) 2021-04-30 15:30:40 -04:00
Caleb Doxsey
d9cc26a2e0
authenticate,proxy: add same site lax to cookies (#2159) 2021-04-30 10:24:47 -06:00
Caleb Doxsey
699ebf061a
config: add support for codec_type (#2156)
* config: add support for codec_type

* add comma

* fix warning block

* fix docs
2021-04-30 07:21:40 -06:00
Caleb Doxsey
0adbf4f24c
controlplane: save configuration events to databroker (#2153)
* envoy: save events to databroker

* controlplane: add tests for envoy configuration events

* format imports
2021-04-29 15:51:46 -06:00
Travis Groth
d32b8a4d8a
docs: mention alternative bearer token header format (#2155) 2021-04-29 15:38:58 -04:00
Travis Groth
16c106441c
deployment: update alpine debug image dependencies (#2154) 2021-04-29 08:45:03 -06:00
Caleb Doxsey
c85c8b0778
authorize: refactor store locking (#2151)
* authorize: refactor store locking

* fix nil reference panic
2021-04-29 08:37:27 -06:00
bobby
9215833a0b
control plane: add request id to all error pages (#2149)
* controlplane: add request id to all error pages

- use a single http error handler for both envoy and go control plane
- add http lib style status text for our custom statuses.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-04-28 15:04:44 -07:00
Caleb Doxsey
91c7dc742f
databroker: store server version in backend (#2142) 2021-04-28 09:12:52 -06:00
wasaga
1b698053f6
let pass custom grpc dial opts (#2144) 2021-04-27 18:26:27 -04:00
bobby
7973ab43fe
authorize: audit log had duplicate "message" key (#2141)
* authorize: audit log had duplicate "message" key

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-04-27 15:26:16 -06:00
Travis Groth
843c4b6fee
docs: upgrade notes on allowed_users by ID (#2133) 2021-04-27 07:37:01 -04:00
Caleb Doxsey
636b3d6846
databroker: add options for maximum capacity (#2095)
* databroker: add options

* implement redis

* add trace for enforce options
2021-04-26 17:14:54 -06:00
Caleb Doxsey
b3216ae854
httputil: fix SPDY support with reverse proxy (#2134) 2021-04-26 14:45:07 -06:00