Commit graph

302 commits

Author SHA1 Message Date
Alex Fornuto
22a7a6a788
update GitHub IdP doc (#2503)
* update GitHub IdP doc

* Update docs/docs/identity-providers/github.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-23 08:44:27 -05:00
Alex Fornuto
8bdf296929
Update Azure IdP Doc (#2497)
* update azure doc

* add 3d part warning

* Update docs/docs/identity-providers/azure.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* clarification and troubleshooting section

* adjust links to not be relative to page location

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-20 15:15:15 -05:00
Alex Fornuto
05b5de8d30
Update IdP Overview Page (#2493)
* save dex-freeipa content in unpublished doc

* remove dex/freeIPA content, refresh IdP overview

* rm whitespace

* Update docs/docs/identity-providers/readme.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/docs/identity-providers/readme.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* copy edits

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-20 11:20:29 -05:00
Alex Fornuto
a76fbc95dd
update Azure IdP doc (#2498) 2021-08-20 10:09:44 -05:00
Alex Fornuto
ac3ce585da
Auth0 Doc Refresh (#2494)
* update auth0 images

* update auth0 guide

* rm whitespace

* add 3rd-party warning

* Update docs/docs/identity-providers/auth0.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* move title to top

* table cleanup

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-20 10:05:43 -05:00
Alex Fornuto
036f223849
document binding service to 443 (#2487) 2021-08-19 18:13:31 -05:00
Alex Fornuto
8c923a7fe5
Update Okta IdP doc (#2491)
* update Okta idp doc

* optimize pngs
reorganize pngs
fix typos

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-08-19 08:47:27 -05:00
Alex Fornuto
65760a9f70
Update Docker Quickstart (#2482)
* Implement partial files

* fix markdown link

* Update Quickstart Doc

This update simplifies the quickstart process by assuming a local test environment without a TLS solution or a FQDN

* add TLS warning

* point to local verify container

* rm empty file

* reference Certificate topic page instructions

* update mkcert instructions

* Update docs/docs/install/readme.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/partials/install-mkcert.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update examples/config/config.docker.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update examples/config/config.docker.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update examples/config/config.docker.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update examples/config/config.docker.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* review edits

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-17 10:22:31 -05:00
Alex Fornuto
6991d19ac3
Wrap mkcert command in quotes (#2481)
This fixes the command in environments like macOS where the CAROOT path includes a space.
2021-08-16 15:23:45 -07:00
Alex Fornuto
33f7e8487a
Update binary install doc (#2447)
* fix route block in example config

* Update binary install to include OS packages

* update references to policy docs
2021-08-06 12:43:57 -05:00
bobby
5cfad79447
docs: update branding, concepts (#2445)
* Pomerium Enterprise not Pomerium Enterprise Console to be consistent.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* s/The Pomerium Enterprise/Pomerium Enterprise/g

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* update concepts

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* Update docs/enterprise/about.md

Co-authored-by: Alex Fornuto <alex@fornuto.com>

* Update docs/enterprise/concepts.md

Co-authored-by: Alex Fornuto <alex@fornuto.com>

Co-authored-by: Alex Fornuto <alex@fornuto.com>
2021-08-06 12:13:35 -04:00
Caleb Doxsey
63ee30d69c
options: remove refresh_cooldown, add allow_spdy to proto (#2446) 2021-08-06 10:06:57 -06:00
bobby
5d04531024
docs: update branding (#2435)
- add svg logos
- adjust colors
- add favicon
- remove outdated demo

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-08-04 22:43:10 -04:00
Travis Groth
7692b2ac49
update v0.15 changelog (#2436) 2021-08-04 18:39:50 -07:00
Caleb Doxsey
0d3ef4564e
doc updates (#2433)
* remove reference to EdDSA, fix numbering, typo

* fix ppl example

* update jwt verification routes

* update kubernetes route

* update local oidc routes

* update mtls routes

* fix transmission policy

* policy -> routes

* update settings

* fix has

* update numbering
2021-08-04 15:00:31 -07:00
Alex Fornuto
5332a752d0
Enterprise Docs (#2390)
* install VuePress Plugin Tabs

https://www.npmjs.com/package/vuepress-plugin-tabs

* init Enterprise documentation section

* replace Vuepress tab plugin

now using https://github.com/superbiger/vuepress-plugin-tabs

* init Enterprise Quickstart

* block of enterprise doc updates

* Helm Quickstart Update (#2380)

* removed/fixed redundant or incorrect config

And some small copy edits

* Update docs/docs/quick-start/helm.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* init console with helm doc

* squash me

* codeblock fix

* init about page

* updates to Enterprise section

* consolidate on Postgres

* WIP helm updates

* update and align OS and Enterprise helm docs

* Enterprise settings docs (#2397)

* init console-specific reference docs files

* remove shortdoc for name

* init Enterprise Reference doc

* expanding Enterprise Reference

* init JS script for reference subpages

When reviewing please remember that I'm not a developer, be kind

* update script and apply

* remove errant dep

* document script and expand for CLI help output

* import pomerium-console_serve.yaml

In future iterations, this file should be sourced at build time as an artifact from the pomerium-console repo

* init new output file

* update script call and output

* fix anchor links

* BROKEN - import content from settings.yaml when dupe is true

* filtering WiP

* fix dupe script, more content

* replace if dupe with if not docs

* squash me

* squash me!

* add docs about PPL (#2404)

* squash meeeeee

* Update docs/enterprise/install/quickstart.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* symlink img dir from docs/reference

* squash mee

* update install reqs

* Fixed links throughout

* Update docs/enterprise/install/quickstart.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/install/quickstart.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* remove internal note

* - format python with black
- format js with prettier

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* optimize images with imageOptim

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* run prettier on config.js

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* concepts.md

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* update concepts

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* copy edits

* typo

* symlink img dir from docs/reference

* modify TLS section in quick-start

* rm whitespace

* add common links postamble

* block of updates

* block of updates

* updates with @travisgroth

* turtles all the way down

* more content

* import all the things

* fill out reports

* fill out reports

* fix file extension

* fix links

* crosslink PPL ref

* document embedded prometheus

* expand example

* update reqs

* document non-directory users

* typo fix

* update metrics_address

* fix broken links in example configs

* update examples for route syntax

* replaced required with deprecated

Note that I didn't link to the route reference because I'm unsure what link formats are accepted when this file is used elsewhere. The warning block below includes a link.

* update enterprise/about

* Update docs/enterprise/console-settings.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/console-settings.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* remove commented config lines

* update non-domain user section in concepts

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/about.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* add console route to OSS conf

* update enterprise settings copy from source file

* Update docs/enterprise/concepts.md

* Update reports reference

* merge conflict resolution

* update sourced doc content, fix whitespace

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-04 13:55:04 -05:00
Caleb Doxsey
cc9962cca6
config: remove support for ed25519 signing keys (#2430) 2021-08-04 09:30:47 -06:00
bobby
c0f9de2a46
docs: clarify device identity, not state, via client certs (#2428)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-08-03 21:46:14 -04:00
Travis Groth
335925d94a
v0.15 release notes (#2409) 2021-08-03 21:36:48 -04:00
Caleb Doxsey
94eb3c1149
config: remove grpc server max connection age options (#2427)
* config: remove grpc server max connection age options

* remove docs
2021-08-03 09:39:48 -06:00
Alex Fornuto
834fa85058
Installation Docs Restructuring (#2406)
* rename quick-start as install, move Synology to guides

* add redirects

* expand redirects, rename installation to releases
2021-07-29 15:40:15 -05:00
bobby
6bac8e1ace
symlink security policy to root of project (#2396)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-07-26 10:42:21 -07:00
Alex Fornuto
86b56ffd37
Docs bug fixes (#2362)
* close warning block, syntax highlight

* Add title, grammar-fix link
2021-07-14 12:34:06 -05:00
Alex Fornuto
e23d42b070
update installation source for mkcert (#2340) 2021-07-07 16:26:51 -05:00
bobby
5813487cfc
docs: google gcp / workspace instructions (#2272)
Deferential to Google's own docs since they keep changing the screens.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-06-10 05:01:11 -06:00
wasaga
96d6005639
config: warn about unrecognized keys (#2256) 2021-05-31 23:35:38 -04:00
Alex Fornuto
8c56d64f31
docs: rm broken link (#2215)
* docs: rm broken link

The was the only image on this page that was also a link to the image, which failed with a 404 (which is the default Nginx 404 page, BTW).

* fmt and typo

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-05-20 21:13:41 -07:00
Alex Fornuto
5b1b6e5ee5
match tenses (#2214)
The ordered list at the end changed from simple present tense to present progressive tense, which can break reader flow.
2021-05-19 11:46:30 -07:00
Joseph Chiocchi
640dfdcfc7
Update programmatic-access.md (#2190)
* Update programmatic-access.md

tries to give a bit more context to the curl snippet to get a token for programmatic access

include bastion host remote port forwarding and some other notes

include headers in request mention

update programmatic access

Update programmatic-access.md

Update programmatic-access.md

update programmatic access

* fumpt

Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-05-16 20:54:32 -07:00
bobby
27c8cd9bd8
proxy / controplane: use old upstream cipher suite (#2196) 2021-05-12 15:37:20 -07:00
Travis Groth
c23305f7b6
docs: add v0.14 feature highlights (#2183) 2021-05-08 17:15:20 -04:00
Travis Groth
264cf384a3
docs: update slack link to vanity url (#2177) 2021-05-05 17:37:14 -04:00
Travis Groth
0071b4e7a5
docs: v0.14.0 (#2174) 2021-05-04 17:39:16 -04:00
Travis Groth
d32b8a4d8a
docs: mention alternative bearer token header format (#2155) 2021-04-29 15:38:58 -04:00
Travis Groth
843c4b6fee
docs: upgrade notes on allowed_users by ID (#2133) 2021-04-27 07:37:01 -04:00
Travis Groth
3b1e5a9a48
deployment: Publish OS packages to cloudsmith (#2105)
* deployment: Publish OS packages to cloudsmith
2021-04-21 07:12:14 -04:00
bobby
073c6063db
docs: add threat model to security page (#2097)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-04-19 09:15:41 -07:00
Travis Groth
187d0a0195
docs: update community slack link (#2063) 2021-04-06 14:57:59 -04:00
Travis Groth
c7d243d742
proxy: restrict programmatic URLs to localhost (#2049)
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-04-01 10:04:49 -04:00
dharmendra kariya
7767992a29
Updating Doc for Pomerium-Dex Exercise (#2018)
* Updating Doc for Pomerium-Dex Exercise

This PR has Documentation for Pomerium-Dex Integration.

Please let me know the changes or do the needful.

I can refactor this.

* Removing Last Two Lines

* Update readme.md
2021-03-30 07:24:58 -06:00
Caleb Doxsey
07e150a5af
ping: add documentation (#1976)
* ping: add documentation

* Update docs/docs/identity-providers/ping.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/docs/identity-providers/ping.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* use yaml for config

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-03-12 09:03:56 -07:00
Tanguy
ec02761e2f
Update data-storage.md (#1941)
Add `databroker_storage_type` in example to make it functional.
2021-02-24 08:00:53 -08:00
Caleb Doxsey
fe5e3712b8
docs: fix query param name (#1920) 2021-02-19 13:56:22 -07:00
bobby
b42b25531e
docs: add breaking sa changes in v0.13 (#1919)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-02-19 12:56:12 -08:00
bobby
b1baa5ac6d
docs: update changelog for v0.13.0 (#1909)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-02-17 16:08:29 -08:00
Travis Groth
ee28f008b5
docs: add load balancing weight documentation (#1883) 2021-02-17 09:36:47 -08:00
Travis Groth
5dac6ec671
docs: misc upgrade notes and changelog (#1884) 2021-02-17 12:23:38 -05:00
bobby
97d561865a
docs: update security policy (#1897)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-02-17 08:52:50 -08:00
Travis Groth
07d9074796
docs: additional load balancing documentation (#1875) 2021-02-12 10:29:01 -05:00
bobby
c3e3ed9b50
authenticate: validate origin of signout (#1876)
* authenticate: validate origin of signout

- add a debug task to kill envoy
- improve various function docs
- userinfo: return "error" page if user is logged out without redirect uri set
- remove front channel logout. There's little difference between it, and the signout function.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2021-02-11 21:37:54 -08:00