Pomerium is an identity and context-aware access proxy.
Find a file
Caleb Doxsey 322e11e60d
core/config: disable gRPC ingress when address is the empty string (#5058)
* core/config: disable gRPC ingress when address is the empty string

* add test

* typo
2024-04-10 13:53:08 -06:00
.github chore(deps): bump the docker group in /.github with 3 updates (#5046) 2024-04-01 11:37:22 -06:00
.vscode use tlsClientConfig instead of custom dialer (#3830) 2022-12-27 09:55:36 -07:00
authenticate core/authenticate: redirect to /.pomerium/signed_out when no signout redirect url is defined (#5060) 2024-04-10 13:39:07 -06:00
authorize core/authorize: add support for rego print statements (#5049) 2024-04-01 14:17:14 -06:00
changelogs changelog for v0.25 (#4896) 2024-01-09 16:30:24 -05:00
cmd/pomerium core/logging: less verbose logs (#5040) 2024-03-29 15:26:20 -06:00
config core/config: disable gRPC ingress when address is the empty string (#5058) 2024-04-10 13:53:08 -06:00
databroker core/databroker: disable identity manager user refresh when hosted authenticate is used (#4905) 2024-01-12 13:30:03 -07:00
examples core/config: remove debug option, always use json logs (#4857) 2023-12-15 11:29:05 -07:00
integration chore(deps): bump the go group with 15 updates (#5048) 2024-04-01 15:53:46 -06:00
internal core/config: disable gRPC ingress when address is the empty string (#5058) 2024-04-10 13:53:08 -06:00
k8s/zero zero/k8s: deployment manifests (#4763) 2024-01-08 12:08:14 -05:00
ospkg move directory providers (#3633) 2022-11-03 11:33:56 -06:00
pkg healthcheck: add common package, zero reporter and first xds check (#5059) 2024-04-10 15:21:39 -04:00
proxy core/authorize: result denied improvements (#4952) 2024-02-01 16:16:33 -07:00
scripts envoy: upgrade to v1.29.3 (#5056) 2024-04-05 15:32:49 -04:00
ui chore(deps): bump @babel/traverse from 7.16.10 to 7.23.2 in /ui (#5055) 2024-04-05 14:26:26 -06:00
.codecov.yml
.dockerignore
.fossa.yml
.gitattributes
.gitignore tls: wildcard catch-all cert must be at the end of cert list (#4119) 2023-04-21 12:37:32 -04:00
.golangci.yml envoy: enable TCP keepalive for internal clusters (#4902) 2024-01-11 09:12:45 -08:00
.pre-commit-config.yaml
.tool-versions ci: upgrade to Go 1.22 (#4967) 2024-02-28 14:58:31 -05:00
3RD-PARTY
DEBUG.MD
Dockerfile chore(deps): bump the docker group with 3 updates (#5045) 2024-04-01 10:25:51 -06:00
Dockerfile.debug chore(deps): bump the docker group with 3 updates (#5045) 2024-04-01 10:25:51 -06:00
go.mod healthcheck: add common package, zero reporter and first xds check (#5059) 2024-04-10 15:21:39 -04:00
go.sum healthcheck: add common package, zero reporter and first xds check (#5059) 2024-04-10 15:21:39 -04:00
LICENSE
Makefile zero/telemetry: add reporter (#4855) 2023-12-20 14:53:06 -05:00
pomerium.go
README.md Docs: remove tcp example (#4616) 2023-10-03 17:47:33 -04:00
RELEASING.md
SECURITY.md Update SECURITY.md (#4144) 2023-05-01 15:17:50 -04:00

pomerium logo

Go Report Card GoDoc LICENSE Docker Pulls

Pomerium builds secure, clientless connections to internal web apps and services without a corporate VPN.

Pomerium is:

  • Easier because you dont have to maintain a client or software.
  • Faster because its deployed directly where your apps and services are. No more expensive data backhauling.
  • Safer because every single action is verified for trusted identity, device, and context.

Its not a VPN alternative its the trusted, foolproof way to protect your business.

Docs

For comprehensive docs, and tutorials see our documentation.

Integration Tests

To run the integration tests locally, first build a local development image:

./scripts/build-dev-docker.bash

Next go to the integration/clusters folder and pick a cluster, for example google-single, then use docker-compose to start the cluster. We use an environment variable to specify the dev docker image we built earlier:

cd integration/clusters/google-single
env POMERIUM_TAG=dev docker-compose up -V

Once that's up and running you can run the integration tests from another terminal:

go test -count=1 -v ./integration/...

If you need to make a change to the clusters themselves, there's a tpl folder that contains jsonnet files. Make a change and then rebuild the clusters by running:

go run ./integration/cmd/pomerium-integration-tests/ generate-configuration