pomerium/k8s/zero

Installing Pomerium Zero

Visit https://console.pomerium.app and register for an account.

Install base pomerium zero

kubectl apply -k https://github.com/pomerium/pomerium/k8s/zero?ref=main

(that would install an evergreen main)

Create a secret with Pomerium Zero token to complete your installation

apiVersion: v1
kind: Secret
metadata:
  name: pomerium
  namespace: pomerium-zero
type: Opaque
stringData:
    pomerium_zero_token:

kubectl apply -f pomerium-secret.yaml

Now your Pomerium deployment should be up and running.

Update Pomerium cluster configuration

1. The externally available address of your Pomerium Cluster should be set to the value assigned by your Load Balancer:

kubectl get svc/pomerium-proxy -n pomerium-zero -o=jsonpath='{.status.loadBalancer.ingress[0].ip}'

2. Because container is configured to run as non-root, the following should be adjusted:

• http redirect address set to :8080
• server address set to :8443