Commit graph

25 commits

Author SHA1 Message Date
Caleb Doxsey
a7442b1498
pomerium-cli: add support for a custom browser command (#2617) 2021-09-21 08:31:30 -06:00
Caleb Doxsey
13b2c8a403
pomerium-cli: use cache dir instead of config dir (#2588) 2021-09-10 15:26:24 -06:00
Travis Groth
a812649a2e
cli: update tcp log output format (#2586) 2021-09-10 10:02:58 -04:00
Caleb Doxsey
8be71800c4
k8s: add flush-credentials command (#2379)
* k8s: add flush-credentials command

* Update cmd/pomerium-cli/kubernetes.go

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-07-20 14:51:55 -07:00
Caleb Doxsey
31fa214983
envoy: add full version (#2287)
* envoy: add full version

* remove unused import

* get envoy for lint
2021-06-14 13:58:12 -06:00
Caleb Doxsey
f9675f61cc
deps: upgrade to go-jose v3 (#2284) 2021-06-10 09:35:44 -06:00
Caleb Doxsey
5d60cff21e
databroker: refactor databroker to sync all changes (#1879)
* refactor backend, implement encrypted store

* refactor in-memory store

* wip

* wip

* wip

* add syncer test

* fix redis expiry

* fix linting issues

* fix test by skipping non-config records

* fix backoff import

* fix init issues

* fix query

* wait for initial sync before starting directory sync

* add type to SyncLatest

* add more log messages, fix deadlock in in-memory store, always return server version from SyncLatest

* update sync types and tests

* add redis tests

* skip macos in github actions

* add comments to proto

* split getBackend into separate methods

* handle errors in initVersion

* return different error for not found vs other errors in get

* use exponential backoff for redis transaction retry

* rename raw to result

* use context instead of close channel

* store type urls as constants in databroker

* use timestampb instead of ptypes

* fix group merging not waiting

* change locked names

* update GetAll to return latest record version

* add method to grpcutil to get the type url for a protobuf type
2021-02-18 15:24:33 -07:00
Caleb Doxsey
ab4a68f56f
remove user impersonation and service account cli (#1768)
* remove user impersonation and service account cli

* update doc

* remove user impersonation url query params

* fix flaky test
2021-01-12 09:28:29 -07:00
Caleb Doxsey
b16236496b
jws: remove issuer (#1754) 2021-01-11 07:57:54 -07:00
bobby
f837c92741
dev: update linter (#1728)
- gofumpt everything
- fix TLS MinVersion to be at least 1.2
- add octal syntax
- remove newlines
- fix potential decompression bomb in ecjson
- remove implicit memory aliasing in for loops.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-12-30 09:02:57 -08:00
bobby
e56e7e4b9e
cli: add version command (#1726)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-12-29 20:04:32 -08:00
Caleb Doxsey
ea4e9fa3aa
add TLS flags for TCP tunnel (#1725) 2020-12-29 14:36:52 -07:00
Caleb Doxsey
796ad2ded8
k8s cmd: use authclient package (#1722) 2020-12-29 12:06:31 -07:00
Caleb Doxsey
61ab4e4837
TCP client command (#1696)
* add cli commands

* add jwt cache test

* add tcptunnel test

* add stdin/stdout support

* use cryptutil hash function

* doc updates

* fix log timestamp
2020-12-17 12:37:28 -07:00
Caleb Doxsey
d18e8c661d
improve ca cert error message, use GetCertPool for databroker storage (#1666) 2020-12-09 11:16:39 -07:00
Caleb Doxsey
eb79cc0957
databroker: require JWT for access (#1503) 2020-10-09 11:08:40 -06:00
Caleb Doxsey
0a6796ff71
authorize: add support for service accounts (#1374) 2020-09-04 10:37:00 -06:00
Robert
2dc8879583
Allow setting the shared secret via an environment variable. (#1337)
This makes it easier to safely pass it in programmatically to a container
without cutting and pasting or putting it on the command line.
2020-08-27 08:39:07 -06:00
Travis Groth
a555e5fcc3
cmd/pomerium-cli: do not require terminal with cached creds (#1196) 2020-08-04 08:36:14 -04:00
Caleb Doxsey
4115c67d93
pomerium-cli: kubernetes fixes (#1176)
* pomerium-cli: fix kubernetes token caching

* pomerium-cli: fix error hanging

* add options for TLS
2020-07-31 13:51:48 -06:00
Caleb Doxsey
b1d72c829b
pomerium-cli: fix kubernetes token caching (#1169)
* pomerium-cli: fix kubernetes token caching

* switch to jose v2
2020-07-31 09:50:06 -06:00
Caleb Doxsey
5df10d1539
pomerium-cli k8s exec-credential (#1073)
* wip

* wip

* remove dead code

* add logging about errors for caching credentials

* rename subcommand
2020-07-16 11:40:43 -06:00
Bobby DeSimone
d7daf274c0
pomerium-cli: add service account docs (#613)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-16 13:28:42 -07:00
Bobby DeSimone
6337377ad6
cli: fix some confusing comments (#602)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-12 10:16:50 -07:00
Bobby DeSimone
9bee6bb648
cmd: add cli to generate service accounts (#552)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-24 20:23:07 -07:00