Commit graph

1810 commits

Author SHA1 Message Date
Travis Groth
edf05960a4
deployment: pin release to latest go version (#2827) 2021-12-16 21:53:17 -05:00
Caleb Doxsey
8778097bb9
authorize: fix nginx infinite redirect (#2812) 2021-12-08 15:10:52 -07:00
backport-actions-token[bot]
9eccefbece
add Grafana to Guides index (#2808) (#2809)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-12-08 09:58:07 -06:00
backport-actions-token[bot]
ec10bbf46e
fix indentation (#2798) (#2799)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-12-02 14:32:17 -06:00
backport-actions-token[bot]
cc8ffed694
Docs: Update Kubernetes Dashboard Guide (#2759) (#2795)
* update dashboard guide...
This new version takes advantage of the RBAC options the Pomerium Helm chart now makes available

* Update docs/guides/kubernetes-dashboard.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* edit intro para

* Apply suggestions from code review

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

* remvove numbered list of one

* Update docs/guides/kubernetes-dashboard.md

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

* typo correction

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-12-01 11:13:56 -06:00
backport-actions-token[bot]
0678a5e619
Docs: Update Securing Kubernetes Guide (#2758) (#2792)
* Update Securing k8s for Ingress Controller (incomplete)

* enable apiProxy

* finish updated draft

* rm outdated cli install method

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* add skip tls verify

also rm errant indentation and break up some long commands

* Update docs/guides/kubernetes.md

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

* Update docs/guides/kubernetes.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-11-30 14:25:03 -06:00
backport-actions-token[bot]
91c1b249a4
Document Pomerium Policy Language (#2784) (#2789)
* Init PPL doc

* copy edits

* Apply suggestions from code review

Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/docs/topics/ppl.md

* whitespace cleanup

Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-11-29 17:15:43 -06:00
backport-actions-token[bot]
86614b5b0e
Docs: Update JWT Verification Guide (#2746) (#2787)
* WIP update

* init mutual auth topic page

* WIP

* update JWT verification guide

* s/Java/Json/g

* remove Mutual Auth topic page and references

The new page will be reviewed and added as a separate PR

* fix JSON capitalization throughout

* copy edit to jwt-verification.md

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-11-29 15:18:38 -06:00
backport-actions-token[bot]
05dc39215e
Docs: Add Grafana Integration Guide (#2742) (#2762)
* first draft

* re-arrange and clarify routes

* clarify troubleshooting resolution

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* consolidate variables

* post-shuffle adjustment

* Apply suggestions from code review

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update grafana.md

Made grammar/spelling changes

* Update docs/guides/grafana.md

* Update docs/guides/grafana.md

* Update docs/guides/grafana.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-11-15 16:30:35 +00:00
backport-actions-token[bot]
fa64368d33
add spdy annotation (#2747) (#2751)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-11-08 08:23:54 -06:00
backport-actions-token[bot]
17bc3a86a1
autocert: remove log (#2584) (#2750)
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-11-05 16:52:30 -04:00
backport-actions-token[bot]
652d3eadc4
Docs: Ingress Controller (#2667) (#2745)
* update k8s install for ingress conrtoller

* typo correction

* prep k8s section

* squashme

* init Ingress Controller doc

Co-authored-by: travisgroth <tgroth@pomerium.com>
Co-authored-by: wasaga <dmishin@pomerium.com>

* update, organize, annotate

* breakout custom from standard annotations

* more info links

* Update docs/docs/k8s/ingress.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/docs/k8s/ingress.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/docs/k8s/ingress.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* prep k8s section

* document YAML policies in Ingress

* sort and compress standard annotations

* final draft

* link cleanup

* Create ingress.md

* Update docs/docs/k8s/ingress.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Apply suggestions from code review

* rm redundant config

* fix file reference

* update available annotations

* Copy Proofread

Grammar updates.

* discussed copy edit

* whitespace cleanup

* add redirect for moved k8s docs

* fixed malformed links

* Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

partial copy edits

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

partial copy edits

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

partial copy edits

* One last TLS

* Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* clarify namespaces flag

* Update docs/docs/k8s/ingress.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: travisgroth <tgroth@pomerium.com>
Co-authored-by: wasaga <dmishin@pomerium.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: travisgroth <tgroth@pomerium.com>
Co-authored-by: wasaga <dmishin@pomerium.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-11-04 16:36:05 -04:00
backport-actions-token[bot]
5d8b1b31f1
update headers in traefik example config (#2732) (#2741)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-11-01 20:37:51 -05:00
backport-actions-token[bot]
ca6e1ebbde
Docs: Update Community Page (#2713) (#2731)
* Update readme.md

* bulleted list for updates

* copy edits

* add mailchimp plugin

* Update readme.md

* invoke custom component

* style custom mailchimp form

* List Discourse for support

Co-authored-by: alexfornuto <alex@fornuto.com>

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
Co-authored-by: alexfornuto <alex@fornuto.com>
2021-11-01 09:21:35 -05:00
backport-actions-token[bot]
cf6d7d5979
identity: fix user refresh (#2724) (#2725)
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-10-28 20:03:48 +00:00
backport-actions-token[bot]
7e81715b17
Minor fix in routes documentation (#2714) (#2721)
* Minor fix in routes documentation

* update reference markdown

Co-authored-by: alexfornuto <alex@fornuto.com>

Co-authored-by: Kerwood <patrick@kerwood.dk>
Co-authored-by: alexfornuto <alex@fornuto.com>
2021-10-28 11:00:07 -05:00
backport-actions-token[bot]
18d04a19e0
reference gRPC API reference (#2717) (#2720)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-10-27 16:52:21 -05:00
backport-actions-token[bot]
8598430705
Update architecture.md (#2701) (#2707)
Deleted an extraneous ]

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-10-26 08:48:48 -05:00
Travis Groth
3003e431a8
deployment: remove DST_Root_CA_X3 from docker images (#2677) (#2698) 2021-10-22 16:21:26 -04:00
backport-actions-token[bot]
6900fe9533
Update create TLS command to quote strings. (#2694) (#2697)
In some instances the cert and key path returned from `mkcert -CAROOT` might contain spaces. If it does the example command fails with the somewhat cryptic error `error: exactly one NAME is required, got 3`. Quoting the values resolves the issue.

Co-authored-by: FutureMatt <43476243+FutureMatt@users.noreply.github.com>
2021-10-22 13:26:19 -05:00
backport-actions-token[bot]
2ba879c006
DOCS: CORS preflight in console (#2642) (#2693)
* document CORS preflight for console

* rm paste error.

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-10-21 12:17:24 -05:00
backport-actions-token[bot]
bdb8ebd470
skip configuration updates to the most recent one (#2690) (#2692)
Co-authored-by: Denis Mishin <dmishin@pomerium.com>
2021-10-21 11:41:59 -04:00
backport-actions-token[bot]
b4d1f605c5
correct claim example (#2689) (#2691)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-10-21 09:03:20 -05:00
backport-actions-token[bot]
f5de6bb06e
Fix typo in docs (#2683) (#2684)
Co-authored-by: Nihaal Sangha <nihaal.git@gmail.com>
2021-10-18 09:08:40 -05:00
backport-actions-token[bot]
20e21964d0
Refresh and Update TCP documentation (#2627) (#2679)
* init client app doc

* init TCP section

* add redirect for TCP client doc

* Redis and Mysql

* finish TCP exampels

* init Draft template

* cleanup whitespace

* escape markdown image in template

* add redirect and update links

* copy edit

* Update readme.md

* fmt

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* optimize png

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* header cleanup and child listing

* Update docs/docs/tcp/ssh.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-10-14 07:58:37 -07:00
backport-actions-token[bot]
585e089239
fixed typo on kubectl (#2673) (#2680)
Co-authored-by: Tom Meadows <djw0bbl3@protonmail.com>
2021-10-14 14:47:07 +00:00
Denis Mishin
697150c88d
add host-rewrite options to config.proto (#2668) (#2669) 2021-10-08 21:21:53 -04:00
backport-actions-token[bot]
9ba556a9d9
add service account redirects (#2664) (#2665)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-10-06 10:24:27 -05:00
backport-actions-token[bot]
0f6cc036ae
protoutil: add NewAny method for deterministic serialization (#2462) (#2662) 2021-10-05 15:41:32 -04:00
Alex Fornuto
46a1426925
DOCS: Standardize Relative Links (#2651) (#2654)
* standardize relative links

* make img refs very relative
2021-10-05 09:04:55 -07:00
backport-actions-token[bot]
914464ab3a
Docs: cross-reference links between concepts and reference (#2648) (#2650)
* cross-reference links between concepts and reference

* Empty commit for CLA hangup

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-30 18:05:16 +00:00
backport-actions-token[bot]
ce29230193
make IdP section collapse (#2641) (#2649)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-30 12:41:58 -05:00
backport-actions-token[bot]
3568adec56
adjust sidebarDepths and document Desktop Client releases (#2643) (#2645)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-30 15:41:43 +00:00
backport-actions-token[bot]
870c26e6e5
typo (#2644) (#2646)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-30 10:41:29 -05:00
backport-actions-token[bot]
238ee7f1e4
Docs: Batch Updates (#2628) (#2640)
* define IdP acronym

* remove 'enable user imporsonation', which was removed

* copy edit recovery token

* integrate SA docs into reference

* rename Prometheus as Metrics

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-29 10:26:31 -05:00
backport-actions-token[bot]
1cb16e05e0
docs: grammar-change/link update (#2638) (#2639)
Updated a link and made a grammar change

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
2021-09-28 20:59:11 -05:00
backport-actions-token[bot]
4992236c96
TCP Client Doc (#2561) (#2626)
* init client app doc

* Update docs/docs/client.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

* Update docs/docs/client.md

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>

* rm whitespace

* document alternate ports

* add Desktop install instructions

* expand tcp port explanation

* convert to headers for links and update content

* loose ends

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-09-22 16:45:26 -05:00
backport-actions-token[bot]
f4e7eb67d7
small updates to Okta doc (#2623) (#2625)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-22 12:39:15 -05:00
backport-actions-token[bot]
5bed6de524
DOCS: Update Enterprise Reference Docs (#2599) (#2624)
* update console reference

* empty commit

* specify audience as list

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-22 12:37:19 -05:00
backport-actions-token[bot]
5f61f7d663
Docs/batch link fixes (#2621) (#2622)
* add redirect for installation

* batch of link fixes

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-21 17:16:11 -05:00
backport-actions-token[bot]
94badd0379
Document Enterprise API (#2595) (#2619)
* init API page

* import examples from repos

* copy edits

* rm whitespace

* squash me

* additional configuration

* document full SA name

* Update docs/enterprise/api.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/api.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/api.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/api.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-09-21 15:43:44 -05:00
backport-actions-token[bot]
442d855181
add redirect for installation (#2618) (#2620)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-21 20:07:51 +00:00
backport-actions-token[bot]
886fb98177
Add docs team as a code owner of packages.json (#2605) (#2607)
* Add docs team as a code owner of packages.json

`packages.json` Is used by the docs site to manage vuepress and its plugins/dependencies.

* empty commit to bypass CLA hangup

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-16 18:13:16 -07:00
backport-actions-token[bot]
749e7b953b
add copy button to code snippets (#2597) (#2600)
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-15 18:12:06 -07:00
backport-actions-token[bot]
a3005bfe2d
New Topic Page: Original Request Context (#2569) (#2602)
* init original context doc

* copy edit

* init Service Account page

* update and expand user context article

* fix header name

* copy edit

* update response path through Pomerium

* clarify SA name is user in policy creation

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-15 19:11:01 -04:00
backport-actions-token[bot]
d88cdb6900
Update CODEOWNERS (#2603) (#2604)
Dev review is still required when I update .vuepress files. This is an attempt to rectify that.

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-15 17:21:51 -05:00
backport-actions-token[bot]
ca704e17f1
Document recovery token generation (#2579) (#2601)
* document recovery token generation

* run console anywhere to generate token

Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2021-09-15 20:34:04 +00:00
Caleb Doxsey
d373a54698
backport 2593 and 2594 to 0.15 (#2598)
* tcptunnel: force the use of HTTP/1.1 during ALPN

* remove unused code

* authclient: clone TLS configuration to prevent overriding NextProtos
2021-09-15 10:21:40 -06:00
Travis Groth
4b83faa569
cli: update tcp log output format (#2586) (#2587) 2021-09-10 11:26:43 -04:00
backport-actions-token[bot]
fdf7e39dd1
docs: rename updated icon image (#2582) (#2583)
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
2021-09-08 21:19:00 +00:00