1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-07-09 21:08:11 +02:00
Commit graph

5 commits

Author SHA1 Message Date
Joe Kralicky
de603f87de
Add new configurable bootstrap writers () ()
* Add new configurable bootstrap writers ()

This PR adds the ability to configure different backends to use for
storing modifications to the zero bootstrap config. The two currently
implemented backends allow writing changes to a file or to a Kubernetes
secret. Backend selection is determined by the scheme in a URI passed to
the flag '--config-writeback-uri'.

In a Kubernetes environment, where the bootstrap config is mounted into
the pod from a secret, this option allows Pomerium to write changes back
to the secret, as writes to the mounted secret file on disk are not
persisted.

* Use env vars for bootstrap config filepath/writeback uri

* linter pass and code cleanup

* Add new config writer options mechanism

This moves the encryption cipher parameter out of the WriteConfig()
method in the ConfigWriter interface and into a new ConfigWriterOptions
struct. Options (e.g. cipher) can be applied to an existing ConfigWriter
to allow customizing implementation-specific behavior.

* Code cleanup/lint fixes

* Move vendored k8s code into separate package, and add license header and package comment
2024-05-31 12:26:17 -04:00
Denis Mishin
dc7820ea3e
zero/healthchecks: add checks for ability to save bootstrap parameter and bundle status reporting () 2024-04-11 10:47:52 -04:00
Caleb Doxsey
a2fd95aae6
core/ci: update linting ()
* core/ci: update linting

* re-add exportloopref

* re-add gocheckcompilerdirectives

* re-add stylecheck

* re-add usestdlibvars

* upgrade lint

---------

Co-authored-by: Denis Mishin <dmishin@pomerium.com>
2023-12-14 09:07:54 -08:00
Denis Mishin
ea64902a73
zero: merge pomerium/zero-sdk () 2023-12-11 17:31:39 -05:00
Denis Mishin
c0b1309e90 zero: bootstrap config () 2023-11-15 09:21:56 -08:00