Commit graph

302 commits

Author SHA1 Message Date
Travis Groth
1b179139be
deployment: add debug image for all releases (#3001) 2022-02-08 07:27:43 -05:00
Travis Groth
ec03a9ffcb
deployment: add nonroot release docker images (#2997) 2022-02-03 15:54:39 -05:00
Alex Fornuto
710ce311dd
demo git over TCP tunnel (#2901)
* demo git over TCP tunnel

* add tip

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2022-02-01 11:50:51 -06:00
Alex Fornuto
7fbf0e522c
Docs: Rewrite Istio Guide for Ingress Controller (#2943)
* istio rewrite, 90%

* complete istio rewrite

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* fix indentation

* precommit

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* add & fix glossary links

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2022-01-26 14:35:56 -06:00
Alex Fornuto
d1b9b29c85
DOCS: New page: Glossary (#2897)
* first draft of glossary

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* add crosslinks and external references

* Apply suggestions from code review

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

* adjust id-aware proxy link

* rm hyphen

* replace id-aware with context-aware proxy

* update keywords

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2022-01-25 16:41:48 -06:00
bobby
20902a715e
Update security.md (#2959)
Unfortunately, it looks like all the low-effort security reports we get are coming from this list. Many times, the "researcher" is actually reporting a vulnerability on their own machine (foo.localhost.pomerium.io). 

https://github.com/sushiwushi/bug-bounty-dorks/blob/master/dorks.txt#L70
2022-01-23 17:26:09 -08:00
Alex Fornuto
fa8e68260b
Update cache to databroker (#2932) 2022-01-18 13:03:41 -06:00
Denis Mishin
1b80aa6c52
document service_proxy_upstream ingress annotation (#2915) 2022-01-12 10:15:55 -06:00
Alex Fornuto
64d50613af
DOCS: keyword tag updates (#2922)
* replace "zero-trust" with "zero trust"

* fix and update all keyword tags
2022-01-11 12:36:47 -06:00
Alex Fornuto
3913aac581
fix references to common traffic patterns (#2906) 2022-01-07 13:35:03 -06:00
Alex
5d34cad553
Remove references to idp_provider_url for Google. (#2882)
* Remove references to idp_provider_url for Google. Closes #2866

* replace google with Okta in nginx docker example

Co-authored-by: alexfornuto <alex@fornuto.com>
2022-01-07 11:21:01 -06:00
Alex Fornuto
82217bac6b
fix links, rm errant formatting attempt (#2888) 2022-01-03 14:33:06 -06:00
Alex Fornuto
21ef7e161c
add link to background page (#2883) 2021-12-31 13:56:03 -08:00
Alex Fornuto
1e7eded292
Docs: Mutual Auth Topic page (#2820)
* WIP update

* init mutual auth topic page

* WIP

* update JWT verification guide

* s/Java/Json/g

* Add mTLS and update some charts

* resummarize

* get my updates in before Bobby gets here

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* finish updates

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* adjust styling for HRs and blockquotes

* mutual auth overhaul

* grammar adjustment

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* remove new blockquote style

* manual review updates

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-12-30 16:06:33 -06:00
Alex Fornuto
9883cfd72d
fixes broken links, adds checker workarounds (#2878) 2021-12-30 15:02:06 -06:00
Alex Fornuto
76ae96980a
DOCS: Fixes to 16 release (#2856)
* clarify upgrade notes and certificate reference

* backport updated reference to source and sort

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* update webauthn link

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-12-29 12:12:33 -06:00
Alex Fornuto
eab9b960bf
Rephrase Discussion around Discuss (#2870)
* rephrase discussion around Discuss

* rm whitespace
2021-12-29 12:11:11 -06:00
Alex Fornuto
f65041ebd1
DOCS: Document webauthn with device ID (#2830)
* init device identity topic page

* add device options to PPL

* init device enrollment guide

* adjust for #2835 and crosslink

* tooltip in PPL on finding device ID

* sort and link matchers

* adjust terminology and crosslink

* standardize new topic name

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* rewrite device identity topic page

* rebase cleanup

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* add links from review with footer refs

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* rm errant newlines

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-12-29 11:19:21 -06:00
Sylvain Rabot
727b8dd8ac
docs: fix generation of the public key (#2864)
Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
2021-12-28 20:27:25 -08:00
Sylvain Rabot
9c7cf05a13
Fix typo (#2861)
Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
2021-12-28 12:53:43 -06:00
Travis Groth
45a348de2a
docs: v0.16 release (#2845) 2021-12-22 18:04:43 -05:00
Alex Fornuto
f48191fe45
DOCS: Create Consolidated Troubleshooting Guide and Replace FAQ (#2797)
* replace FAQ with troubleshooting

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* clarify JWT authentication issue

* elevate and clarify HSTS issue

* expand Set Response Header reference section

* Apply suggestions from code review

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

* capitalize Pomerium serivice names

* additional capitalization

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-12-21 12:33:01 -06:00
Denis Mishin
52920eaf72
add docs for ingress regex path (#2822) 2021-12-16 16:33:24 -05:00
Denis Mishin
41877e166b
fix typo in docs (#2819) 2021-12-13 16:48:51 -05:00
Caleb Doxsey
2d04106e6d
ppl: add support for http_path and http_method (#2813)
* ppl: add support for http_path and http_method

* fix import ordering
2021-12-10 07:28:51 -07:00
Travis Groth
1bfdae4e12
docs: update pomerium-cli location (#2790) 2021-12-01 15:00:11 -05:00
Alex Fornuto
150862b7e6
Document Pomerium Policy Language (#2784)
* Init PPL doc

* copy edits

* Apply suggestions from code review

Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/docs/topics/ppl.md

* whitespace cleanup

Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-11-29 17:13:48 -06:00
Alex Fornuto
f016981194
Docs: Update JWT Verification Guide (#2746)
* WIP update

* init mutual auth topic page

* WIP

* update JWT verification guide

* s/Java/Json/g

* remove Mutual Auth topic page and references

The new page will be reviewed and added as a separate PR

* fix JSON capitalization throughout

* copy edit to jwt-verification.md

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-11-29 15:11:39 -06:00
Caleb Doxsey
a8b76bd623
authorize: support X-Pomerium-Authorization in addition to Authorization (#2780)
* authorize: support X-Pomerium-Authorization in addition to Authorization

* tangentental correction

Co-authored-by: alexfornuto <alex@fornuto.com>
2021-11-29 12:19:14 -07:00
Alex Fornuto
88c5eeba45
coy edit to changelog entry (#2786) 2021-11-29 11:31:11 -06:00
bobby
1a7c5415e7
identity: only assign access_type uri params to google. (#2782)
* identity: only assign `access_type` uri params to google.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* bump upgrading

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-11-28 19:01:34 -08:00
Alex Fornuto
82e654fcad
add spdy annotation (#2747) 2021-11-08 08:06:55 -06:00
Alex Fornuto
4cb3281af7
Docs: Ingress Controller (#2667)
* update k8s install for ingress conrtoller

* typo correction

* prep k8s section

* squashme

* init Ingress Controller doc

Co-authored-by: travisgroth <tgroth@pomerium.com>
Co-authored-by: wasaga <dmishin@pomerium.com>

* update, organize, annotate

* breakout custom from standard annotations

* more info links

* Update docs/docs/k8s/ingress.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/docs/k8s/ingress.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/docs/k8s/ingress.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* prep k8s section

* document YAML policies in Ingress

* sort and compress standard annotations

* final draft

* link cleanup

* Create ingress.md

* Update docs/docs/k8s/ingress.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Apply suggestions from code review

* rm redundant config

* fix file reference

* update available annotations

* Copy Proofread

Grammar updates.

* discussed copy edit

* whitespace cleanup

* add redirect for moved k8s docs

* fixed malformed links

* Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

partial copy edits

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

partial copy edits

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

partial copy edits

* One last TLS

* Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* clarify namespaces flag

* Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: travisgroth <tgroth@pomerium.com>
Co-authored-by: wasaga <dmishin@pomerium.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-11-04 12:59:51 -05:00
cmo-pomerium
90f2b00bb6
Docs: Update Community Page (#2713)
* Update readme.md

* bulleted list for updates

* copy edits

* add mailchimp plugin

* Update readme.md

* invoke custom component

* style custom mailchimp form

* List Discourse for support

Co-authored-by: alexfornuto <alex@fornuto.com>
2021-11-01 09:10:58 -05:00
Caleb Doxsey
99b905a336
github: use GraphQL API to reduce number of API calls for directory sync (#2715)
* github: use GraphQL API to reduce number of API calls for directory sync

* fix id encoding

* github: use slug instead of id, update upgrading.md

* Update docs/docs/upgrading.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-10-27 11:50:48 -06:00
cmo-pomerium
97dfb7c386
Update architecture.md (#2701)
Deleted an extraneous ]
2021-10-25 14:07:44 -07:00
FutureMatt
0638b07f4d
Update create TLS command to quote strings. (#2694)
In some instances the cert and key path returned from `mkcert -CAROOT` might contain spaces. If it does the example command fails with the somewhat cryptic error `error: exactly one NAME is required, got 3`. Quoting the values resolves the issue.
2021-10-22 10:55:35 -05:00
Tom Meadows
7e1537792d
fixed typo on kubectl (#2673) 2021-10-14 09:37:25 -05:00
Alex Fornuto
b2b8c481d5
Refresh and Update TCP documentation (#2627)
* init client app doc

* init TCP section

* add redirect for TCP client doc

* Redis and Mysql

* finish TCP exampels

* init Draft template

* cleanup whitespace

* escape markdown image in template

* add redirect and update links

* copy edit

* Update readme.md

* fmt

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* optimize png

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* header cleanup and child listing

* Update docs/docs/tcp/ssh.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-10-14 09:35:31 -05:00
Alex Fornuto
fafd39dbe7
adjust sidebarDepths and document Desktop Client releases (#2643) 2021-09-29 16:53:24 -05:00
Alex Fornuto
1a5cfda940
Docs: Batch Updates (#2628)
* define IdP acronym

* remove 'enable user imporsonation', which was removed

* copy edit recovery token

* integrate SA docs into reference

* rename Prometheus as Metrics
2021-09-29 09:49:42 -05:00
Alex Fornuto
637489912c
TCP Client Doc (#2561)
* init client app doc

* Update docs/docs/client.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

* Update docs/docs/client.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

* rm whitespace

* document alternate ports

* add Desktop install instructions

* expand tcp port explanation

* convert to headers for links and update content

* loose ends

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-09-22 16:38:20 -05:00
Alex Fornuto
6977709f6b
small updates to Okta doc (#2623) 2021-09-22 12:37:58 -05:00
Alex Fornuto
00f2f48f7a
Docs/batch link fixes (#2621)
* add redirect for installation

* batch of link fixes
2021-09-21 13:44:27 -07:00
Alex Fornuto
62ac580a57
New Topic Page: Original Request Context (#2569)
* init original context doc

* copy edit

* init Service Account page

* update and expand user context article

* fix header name

* copy edit

* update response path through Pomerium

* clarify SA name is user in policy creation
2021-09-09 11:26:57 -05:00
Caleb Doxsey
33f5190572
config: remove signature_key_algorithm (#2557)
* config: remove signature_key_algorithm

* typo

* add more tests
2021-09-02 11:36:43 -06:00
Alex Fornuto
9e5377757e
Update Ping Identity IdP (#2537)
* move img to sub-folder

* update Ping IdP doc

* Apply suggestions from code review

* Update docs/docs/identity-providers/ping.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-30 08:47:43 -05:00
Alex Fornuto
b098cc5c55
update OneLogin IdP doc (#2533)
* update OneLogin IdP doc

* include 3rd party warning
2021-08-29 15:01:19 -07:00
Alex Fornuto
f17d66a732
Update GitLab IdP doc (#2520) 2021-08-25 10:52:11 -05:00
Caleb Doxsey
1cbcb8335d
config: remove headers (#2522)
* config: remove headers

* Update docs/docs/upgrading.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-08-25 09:20:17 -06:00