* sort Routes Reference
I know the diff is nigh-incomprehensible, but I found a script to
confirm that no content was lost during the sort:
```sh
❯ git diff-tree --no-commit-id --name-only -r HEAD | {
while IFS= read -r file_path; do
git show "HEAD:${file_path}" | sort >new.txt
git show "HEAD^1:${file_path}" | sort >old.txt
echo "Diff for ${file_path}:"
diff old.txt new.txt
shasum old.txt new.txt
done
}
Diff for docs/reference/readme.md:
1ff1c65acba1a5bce8c37e56a2e770d74158eec9 old.txt
1ff1c65acba1a5bce8c37e56a2e770d74158eec9 new.txt
```
* copy-edit host rewrite section
* document per-route idp client id and secret
* Clarify renaming of claims with underscores
* copy edits
One to the proposed change, one to existing language
Co-authored-by: alexfornuto <afornuto@pomerium.com>
* Remove references to idp_provider_url for Google. Closes#2866
* replace google with Okta in nginx docker example
Co-authored-by: alexfornuto <alex@fornuto.com>
* clarify upgrade notes and certificate reference
* backport updated reference to source and sort
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* update webauthn link
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* envoy: add support for bind_config bootstrap options
* only add upstream bind config options to individual policy clusters
* update docs for new Envoy keys
Co-authored-by: alexfornuto <alex@fornuto.com>
The `autocert_ca` and `autocert_email` options have been added to be
able to configure CAs that support the ACME protocol as an alternative
to Let's Encrypt.
Fix ProtoBuf definition for additional autocert options
Fix PR comments and add ACME EAB configuration
Add configuration option for trusted CAs when talking ACME
Fix linter issues
copy edits
render updated reference to docs
Add test for autocert manager configuration
Add tests for autocert configuration options
Fix CI build issues
Don't set empty acme.EAB struct if configuration not set
Remove required email when setting custom CA
When using a non-default CA it's no longer required
to specify an email address. I required this before,
because it seemed to cause an issue in which no certificate
was issued. The root cause was something different,
rendering the hard email requirement pointless. It's
still beneficial to specify an email, though. I changed
the text in the docs to explain that.
Update generated docs
Fix failing tests by recreation of a new ACMEManager
The default ACMEManager object was reused in multiple tests,
resulting in unexpected states when tests run in parallel.
By using a new instance for every test, this is no longer
an issue.
* install VuePress Plugin Tabs
https://www.npmjs.com/package/vuepress-plugin-tabs
* init Enterprise documentation section
* replace Vuepress tab plugin
now using https://github.com/superbiger/vuepress-plugin-tabs
* init Enterprise Quickstart
* block of enterprise doc updates
* Helm Quickstart Update (#2380)
* removed/fixed redundant or incorrect config
And some small copy edits
* Update docs/docs/quick-start/helm.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* init console with helm doc
* squash me
* codeblock fix
* init about page
* updates to Enterprise section
* consolidate on Postgres
* WIP helm updates
* update and align OS and Enterprise helm docs
* Enterprise settings docs (#2397)
* init console-specific reference docs files
* remove shortdoc for name
* init Enterprise Reference doc
* expanding Enterprise Reference
* init JS script for reference subpages
When reviewing please remember that I'm not a developer, be kind
* update script and apply
* remove errant dep
* document script and expand for CLI help output
* import pomerium-console_serve.yaml
In future iterations, this file should be sourced at build time as an artifact from the pomerium-console repo
* init new output file
* update script call and output
* fix anchor links
* BROKEN - import content from settings.yaml when dupe is true
* filtering WiP
* fix dupe script, more content
* replace if dupe with if not docs
* squash me
* squash me!
* add docs about PPL (#2404)
* squash meeeeee
* Update docs/enterprise/install/quickstart.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* symlink img dir from docs/reference
* squash mee
* update install reqs
* Fixed links throughout
* Update docs/enterprise/install/quickstart.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* Update docs/enterprise/install/quickstart.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* remove internal note
* - format python with black
- format js with prettier
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
* optimize images with imageOptim
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
* run prettier on config.js
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
* concepts.md
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
* update concepts
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
* copy edits
* typo
* symlink img dir from docs/reference
* modify TLS section in quick-start
* rm whitespace
* add common links postamble
* block of updates
* block of updates
* updates with @travisgroth
* turtles all the way down
* more content
* import all the things
* fill out reports
* fill out reports
* fix file extension
* fix links
* crosslink PPL ref
* document embedded prometheus
* expand example
* update reqs
* document non-directory users
* typo fix
* update metrics_address
* fix broken links in example configs
* update examples for route syntax
* replaced required with deprecated
Note that I didn't link to the route reference because I'm unsure what link formats are accepted when this file is used elsewhere. The warning block below includes a link.
* update enterprise/about
* Update docs/enterprise/console-settings.yaml
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* Update docs/enterprise/console-settings.yaml
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* Update docs/enterprise/concepts.md
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* Update docs/enterprise/concepts.md
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* Apply suggestions from code review
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* Update docs/enterprise/concepts.md
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* remove commented config lines
* update non-domain user section in concepts
* Update docs/enterprise/concepts.md
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* Update docs/enterprise/concepts.md
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* Update docs/enterprise/about.md
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
* Update docs/enterprise/concepts.md
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* Update docs/enterprise/concepts.md
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* add console route to OSS conf
* update enterprise settings copy from source file
* Update docs/enterprise/concepts.md
* Update reports reference
* merge conflict resolution
* update sourced doc content, fix whitespace
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
* config: rename headers to set_response_headers
* Update config/options.go
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
