Commit graph

1762 commits

Author SHA1 Message Date
Caleb Doxsey
6e385f800a
config: add support for host header rewriting (#1457)
* config: add support for host header rewriting

* fix lint
2020-09-25 09:36:39 -06:00
Caleb Doxsey
29b2fa4e60
proxy: preserve path and query string for http->https redirect (#1456) 2020-09-24 15:12:56 -06:00
Caleb Doxsey
83415ee52f
identity manager: fix directory sync timing (#1455) 2020-09-24 13:23:43 -06:00
Caleb Doxsey
f4c61a0cdc
redis: use pubsub instead of keyspace events (#1450) 2020-09-23 14:40:05 -06:00
Caleb Doxsey
852c96f22f
proxy: add support for /.pomerium/jwt (#1446) 2020-09-23 07:55:12 -06:00
Caleb Doxsey
2364da14c8
databroker: add support for querying the databroker (#1443)
* databroker: add support for querying the databroker

* remove query method, use getall so encryption works

* add test

* return early
2020-09-22 16:01:37 -06:00
Travis Groth
fdec45fe04
docs: add architecture diagram for cloudrun (#1444) 2020-09-22 17:40:48 -04:00
bobby
0c60a9404e
httputil: remove retry button (#1438)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-09-22 07:53:53 -07:00
bobby
a1ba04d231
deployment: bump release go to v1.15.x (#1439)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-09-22 07:41:42 -07:00
Caleb Doxsey
54d37e62e8
config: add dns_lookup_family option to customize DNS IP resolution (#1436) 2020-09-21 15:32:37 -06:00
Travis Groth
0537dd63d4
proxy: always use https for application callback (#1433) 2020-09-21 15:58:46 -04:00
Travis Groth
512dd9093e
deps: go mod tidy (#1434) 2020-09-21 15:57:45 -04:00
Renovate Bot
3bd70309d9 chore(deps): update module rs/zerolog to v1.20.0 2020-09-21 16:51:06 +00:00
Renovate Bot
76e2534d43 chore(deps): update module caddyserver/certmagic to v0.12.0 2020-09-21 15:51:09 +00:00
Renovate Bot
0f51f369a7 chore(deps): update google.golang.org/genproto commit hash to d0d6055 2020-09-21 14:27:51 +00:00
Travis Groth
5157726e6f
docs: Add Traefik + Kubernetes example (#1411) 2020-09-19 13:33:32 -04:00
bobby
bf937f362b
controplane: remove p-521 EC (#1420)
* controplane: remove p-521 EC

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-09-18 08:18:21 -07:00
tdorsey
e7ffbf8b5c
fix(examples): Use X-Pomerium-Claim headers (#1422) 2020-09-18 10:42:36 -04:00
Caleb Doxsey
0860ec3a5c
okta: handle deleted groups (#1418)
* okta: handle deleted groups

* limit api error body read
2020-09-18 08:10:32 -06:00
tdorsey
5c226f6fc0
chore(docs): Fix typo in example policy (#1419) 2020-09-17 18:15:38 -07:00
Caleb Doxsey
3b6c617784
redirect-server: add config headers to responses (#1416) 2020-09-17 13:01:45 -06:00
Shinebayar G
7c990a45b1
docs: fix grammar (#1412) 2020-09-17 08:16:22 -07:00
Caleb Doxsey
665f0f9a74
azure: add support for nested groups (#1408)
* azure: add support for nested groups

* fix test
2020-09-17 08:25:10 -06:00
bobby
79a01bcfbb
controlplane: support P-384 / P-512 EC curves (#1409)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-09-16 17:35:00 -07:00
Renovate Bot
c039b664cb chore(deps): update module google.golang.org/grpc to v1.32.0 2020-09-14 15:58:50 +00:00
Renovate Bot
63280d9d0d chore(deps): update module openzipkin/zipkin-go to v0.2.4 2020-09-14 03:24:31 +00:00
Renovate Bot
6c701a2a10 chore(deps): update module gorilla/handlers to v1.5.1 2020-09-14 02:39:46 +00:00
Renovate Bot
9ebb9d5cdc chore(deps): update google.golang.org/genproto commit hash to 645f7a4 2020-09-14 01:49:17 +00:00
Travis Groth
f812ec5812
ci: publish cloudrun latest tag (#1398)
* ci: publish cloudrun latest tag
2020-09-11 17:05:18 -04:00
Caleb Doxsey
a19e45334b
proxy: remove impersonate headers for kubernetes (#1394)
* proxy: remove impersonate headers for kubernetes

* master on frontend/statik
2020-09-09 15:24:39 -06:00
bobby
05d9fbb4b3
Desimone/authenticate default logout (#1390)
* authenticate: fix unset post_logout_redirect_uri
* don't show url if does not exist
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-09-09 11:53:12 -07:00
Caleb Doxsey
1fcd86120b
proxy: for filter matches only include bare domain name (#1389) 2020-09-09 08:56:15 -06:00
Travis Groth
145c2cf8f5
internal/envoy: start epoch from 0 (#1387) 2020-09-09 10:25:21 -04:00
Manatsawin Hanmongkolchai
904edfed9a
docs: fix remove_request_headers typo (#1388) 2020-09-08 21:35:09 -07:00
bobby
311dde8b61
docs: update azure docs (#1377)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-09-08 12:58:11 -07:00
Cuong Manh Le
5561a41b52 Run go mod tidy 2020-09-08 21:50:29 +07:00
Renovate Bot
46cfef85e1 chore(deps): update module go.uber.org/zap to v1.16.0 2020-09-07 08:35:23 +00:00
Renovate Bot
a0d271e800 chore(deps): update golang.org/x/oauth2 commit hash to 5d25da1 2020-09-07 06:48:28 +00:00
Renovate Bot
7bcf7d224f chore(deps): update google.golang.org/genproto commit hash to 0bd0a95 2020-09-07 05:14:59 +00:00
Renovate Bot
8d4f8c25d6 chore(deps): update golang.org/x/net commit hash to 62affa3 2020-09-07 04:37:47 +00:00
Caleb Doxsey
0a6796ff71
authorize: add support for service accounts (#1374) 2020-09-04 10:37:00 -06:00
Cuong Manh Le
eaf0dd4e67 internal/identity/manager: increase default refresh groups timeout 2020-09-04 23:17:56 +07:00
Cuong Manh Le
5895331768 internal/identity/manager: improve timeout error message
By pointing user to configuration docs.
2020-09-04 23:17:56 +07:00
bobby
43d37ace94
proxy/controlplane: make health checks debug level (#1368)
- proxy: remove version from ping handler

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-09-04 07:31:12 -07:00
Cuong Manh Le
08a094ae93
internal/directory/okta: remove rate limiter (#1370)
We did honor the rate limit header from okta, so don't bother to add our
rate limiter there.
2020-09-04 18:23:14 +07:00
Travis Groth
9535f99c57
ci: add stale issue automation (#1366) 2020-09-03 14:46:02 -04:00
Caleb Doxsey
49d1a71ff2
databroker: add tracing for rego evaluation and databroker sync, fix bug in databroker config source (#1367) 2020-09-03 08:11:34 -06:00
Travis Groth
5488e6d5fa
deployment: fully split release archives and brews (#1365) 2020-09-02 17:32:52 -04:00
Caleb Doxsey
0a2638e5dc
authorize: use impersonate email/groups in JWT (#1364) 2020-09-02 13:50:46 -06:00
Caleb Doxsey
4fb90fabe8
config: support explicit prefix and regex path rewriting (#1363)
* config: support explicity prefix and regex path rewriting

* add rewrite tests
2020-09-02 13:48:19 -06:00