Commit graph

81 commits

Author SHA1 Message Date
Bobby DeSimone
92a839036d
docs: add contributing.md 2019-07-12 18:02:38 -07:00
Travis Groth
e635c9bb3b HTTP metrics improvements
- Switch to ochttp plugin
- Add HTTP request metrics
- Relabel for consistency
2019-07-11 22:49:54 -04:00
Travis Groth
4bd4b27f28 GRPC metrics improvements
- change to ocgrpc plugin
- rename labels to be more consistent
- refactor view registration patterns
- add server metrics- add client request size metrics
2019-07-10 22:35:56 -04:00
Bobby DeSimone
9682937d19
docs: update for v0.1.0 release 2019-07-07 19:33:05 -07:00
Bobby DeSimone
7558d5b0de
internal/config: refactor option parsing
- authorize: build whitelist from policy's URLs instead of strings.
- internal/httputil: merged httputil and https package.
- internal/config: merged config and policy packages.
- internal/metrics: removed unused measure struct.
- proxy/clients: refactor Addr fields to be urls.
- proxy: remove unused extend deadline function.
- proxy: use handler middleware for reverse proxy leg.
- proxy: change the way websocket requests are made (route based).

General improvements
- omitted value from range in several cases where for loop could be simplified.
- added error checking to many tests.
- standardize url parsing.
- remove unnecessary return statements.

- proxy: add self-signed certificate support. #179
- proxy: add skip tls certificate verification. #179
- proxy: Refactor websocket support to be route based. #204
2019-07-07 09:39:31 -07:00
Bobby DeSimone
28efa3359b
Merge pull request #199 from desimone/feature/development-docs
docs: add guide for hacking offline with domains
2019-07-06 11:53:49 -07:00
Travis Groth
b2754fd822 internal/identity: fix bug in azure preventing group retrieval 2019-07-06 13:07:48 -04:00
Travis Groth
989062db8e Allow empty policies at startup 2019-07-02 06:25:25 -04:00
Bobby DeSimone
b8463e30c1
Merge pull request #195 from travisgroth/feature/grpc_metrics
internal/metrics: add gRPC Client Metrics
2019-07-01 08:06:36 -07:00
Bobby DeSimone
815eb7df07
docs: add docs for hacking on poemrium with domains offline 2019-06-30 20:57:28 +02:00
Travis Groth
43ff275b16 Fix #188 2019-06-30 10:24:22 -04:00
Travis Groth
77338bd4e9 Add GRPC Client Metrics 2019-06-28 06:35:27 -04:00
Travis Groth
d303a95985 Add proxy client metrics instrumentation
* New set of client request oriented metrics
* RoundTripper chain to instrument requests
2019-06-21 18:55:02 -04:00
Travis Groth
ff528e8c7b Add metrics implementation* Covers proxy service on server side* Update documentation 2019-06-16 07:07:40 -04:00
Bobby DeSimone
cf0f98536a
authenticate: programmatic access support
- authenticate: added a token exchange api endpoint that converts
  an identity provider's JWT into a pomerium session.
- internal/identity: authenticate now passes context.
- internal/identity: removed extraneous GetSignInURL from okta.
- internal/sessions: add rest store
- update go.mod / go.sum depedencies.
- docs: add programmatic examples in shell and python
2019-06-12 14:51:19 -07:00
Bobby DeSimone
554e62108f
authorize: fix headers when impersonating
- Add user impersonation docs.
- Add navbar link to v0.0.5 docs.
2019-06-11 15:40:28 -07:00
Bobby DeSimone
0bbb923579
docs: tweaks to helm script and example config 2019-06-05 17:58:24 -07:00
Bobby DeSimone
6ee9c61d5e
docs: tag as latest again 2019-06-04 22:49:00 -07:00
Bobby DeSimone
55d01c4fa4
docs: bump version in docs 2019-06-04 22:20:18 -07:00
Bobby DeSimone
6eab1b7630
docs: fix typos in examples 2019-06-04 22:19:07 -07:00
Bobby DeSimone
dec57f66f3
cmd/pomerium: add version and options dump (#164) 2019-06-04 17:45:17 -07:00
Bobby DeSimone
49bc8274f1
Merge pull request #165 from desimone/docs/v0-0-5-update
docs: update docs for v0.0.5
2019-06-04 16:25:01 -07:00
Bobby DeSimone
2618602ae1
docs: update upgrading.md for v0.0.5 2019-06-04 15:41:27 -07:00
Bobby DeSimone
e9faefea16
docs: update docs for v0.0.5 2019-06-04 15:21:25 -07:00
Bobby DeSimone
14403ce388
docs: update examples for v0.0.5 (#147) 2019-06-03 14:05:28 -07:00
Tejasvi Nareddy
f966e5ab19 (proxy, internal/config, internal/log, docs): opt-in websocket support 2019-06-01 22:39:46 -04:00
Travis Groth
8c2beac6f1 Add automatic configuration reloading and
policy handling
2019-06-01 14:52:10 -04:00
Bobby DeSimone
77f3933560
internal/config: change internal-authenticate-addr to url (#154) 2019-05-31 17:53:58 -07:00
Bobby DeSimone
1791e3d3f7
Merge pull request #137 from desimone/docs/add-upgrading-guide
docs: add upgrade guide
2019-05-31 11:40:40 -07:00
Travis Groth
1148c3cd9b Added note for configuration refactor 2019-05-30 21:56:03 -04:00
Bobby DeSimone
3d6471c4b3
docs: fix example policy name typo (#143)
Rename s/config-policy-only.yaml /config.example.policy.only/
Removed POLICY_FILE references
2019-05-27 14:06:10 -07:00
Bobby DeSimone
80612247e3
docs: add versioning (#141)
docs: make colors and logos consistent
Fixes #109
2019-05-26 21:52:51 -07:00
Bobby DeSimone
794b7996db
Merge pull request #139 from travisgroth/feature/viper-config
deployment: expose config file interface in docker images
2019-05-26 20:09:07 -07:00
Travis Groth
02177043aa Add config handling to dockerfiles and update documentation 2019-05-26 22:28:51 -04:00
Bobby DeSimone
2dc88d44ee
Merge pull request #124 from desimone/docs/update-helm-and-aws-script
deployment: remove helm from main repo
2019-05-26 14:59:32 -07:00
Bobby DeSimone
66b4c2d3cd
authenticate/proxy: add user impersonation, refresh, dashboard (#123)
proxy: Add user dashboard. [GH-123]
proxy/authenticate: Add manual refresh of their session. [GH-73]
authorize: Add administrator (super user) account support. [GH-110]
internal/policy: Allow administrators to impersonate other users. [GH-110]
2019-05-26 12:33:00 -07:00
Bobby DeSimone
3ee23e3308
docs: add upgrade guide 2019-05-25 14:08:12 -07:00
Travis Groth
febf9464a4 Switch options parsing to viper 2019-05-25 15:06:32 -04:00
Tejasvi Nareddy
c5d2e40435 (proxy, internal\policy, docs\reference): define new access control option to bypass authentication 2019-05-22 23:12:30 -04:00
Bobby DeSimone
950f720660
docs: add amazon helm script to examples 2019-05-16 21:44:33 -07:00
Bobby DeSimone
27d4683662
authenticate: add CSP headers to this service only (#120) 2019-05-14 22:29:24 -07:00
Bobby DeSimone
04a653f694
docs: fix typos and reorganize 2019-05-09 23:16:26 -07:00
Bobby DeSimone
5448e3599a
cmd/pomerium : refactor main to more testable (#112)
- cmd/pomerium: refactor global timeouts to be configurable
- cmd/pomerium: add tests
- cmd/pomerium: remove debug flag, set with env vars only
- cmd/pomerium: global ping now returns version not OK
- proxy: validate shared secret encoding and length
- docs: add timeout to example policy
- docs: document timeouts and cors
- docs: update pomerium logo
- docs: add policy authorization docs
2019-05-09 23:10:19 -07:00
Bobby DeSimone
5e37c29dfe
proxy: make http headers configurable (#108)
- http headers can be disabled via an env config
- http headers can be configured by k/v map env config
- pomerium/envconfig updated to use original syntax v1.5.0
- go.mod / go.sum patches updated
2019-05-07 12:05:25 -07:00
Bobby DeSimone
0086fa05f8
docs: fix typos in reference 2019-05-03 20:54:21 -07:00
Bobby DeSimone
25d76cd5c0
proxy: make http redirect server configurable (#105) 2019-05-03 20:48:26 -07:00
Bobby DeSimone
ce7a8b1f2d
docs: add certificate section (#96)
Closes #88
2019-04-27 20:21:43 -07:00
Bobby DeSimone
fbe1cae482
proxy: remove unused setting AuthorizeInternalAddr (#93)
- Added unit tests for policy validation.
- Removed extraneous policy validation for URLs.
- Add dependency caching to dockerfile.
2019-04-24 13:28:29 -07:00
Bobby DeSimone
96f4b8bd61
docs: add sitemap 2019-04-14 17:59:31 -07:00
Bobby DeSimone
603e6a17b9
authenticate: infer settings from authenticate url (#83) 2019-04-10 12:16:00 -07:00