Pomerium is an identity and context-aware access proxy.
Find a file
Alex Fornuto 5332a752d0
Enterprise Docs (#2390)
* install VuePress Plugin Tabs

https://www.npmjs.com/package/vuepress-plugin-tabs

* init Enterprise documentation section

* replace Vuepress tab plugin

now using https://github.com/superbiger/vuepress-plugin-tabs

* init Enterprise Quickstart

* block of enterprise doc updates

* Helm Quickstart Update (#2380)

* removed/fixed redundant or incorrect config

And some small copy edits

* Update docs/docs/quick-start/helm.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* init console with helm doc

* squash me

* codeblock fix

* init about page

* updates to Enterprise section

* consolidate on Postgres

* WIP helm updates

* update and align OS and Enterprise helm docs

* Enterprise settings docs (#2397)

* init console-specific reference docs files

* remove shortdoc for name

* init Enterprise Reference doc

* expanding Enterprise Reference

* init JS script for reference subpages

When reviewing please remember that I'm not a developer, be kind

* update script and apply

* remove errant dep

* document script and expand for CLI help output

* import pomerium-console_serve.yaml

In future iterations, this file should be sourced at build time as an artifact from the pomerium-console repo

* init new output file

* update script call and output

* fix anchor links

* BROKEN - import content from settings.yaml when dupe is true

* filtering WiP

* fix dupe script, more content

* replace if dupe with if not docs

* squash me

* squash me!

* add docs about PPL (#2404)

* squash meeeeee

* Update docs/enterprise/install/quickstart.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* symlink img dir from docs/reference

* squash mee

* update install reqs

* Fixed links throughout

* Update docs/enterprise/install/quickstart.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/install/quickstart.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* remove internal note

* - format python with black
- format js with prettier

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* optimize images with imageOptim

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* run prettier on config.js

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* concepts.md

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* update concepts

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

* copy edits

* typo

* symlink img dir from docs/reference

* modify TLS section in quick-start

* rm whitespace

* add common links postamble

* block of updates

* block of updates

* updates with @travisgroth

* turtles all the way down

* more content

* import all the things

* fill out reports

* fill out reports

* fix file extension

* fix links

* crosslink PPL ref

* document embedded prometheus

* expand example

* update reqs

* document non-directory users

* typo fix

* update metrics_address

* fix broken links in example configs

* update examples for route syntax

* replaced required with deprecated

Note that I didn't link to the route reference because I'm unsure what link formats are accepted when this file is used elsewhere. The warning block below includes a link.

* update enterprise/about

* Update docs/enterprise/console-settings.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/console-settings.yaml

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* remove commented config lines

* update non-domain user section in concepts

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/about.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* Update docs/enterprise/concepts.md

Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>

* add console route to OSS conf

* update enterprise settings copy from source file

* Update docs/enterprise/concepts.md

* Update reports reference

* merge conflict resolution

* update sourced doc content, fix whitespace

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2021-08-04 13:55:04 -05:00
.devcontainer docs: replace httpbin with verify (#1702) 2020-12-22 09:53:08 -08:00
.github ci: update gcloud action (#2393) 2021-07-24 10:22:52 -07:00
.vscode config related metrics (#2065) 2021-04-07 12:29:36 -07:00
authenticate sessions: add impersonate_session_id, remove legacy impersonation (#2407) 2021-07-30 08:42:36 -06:00
authorize authorize: add sid to JWT claims (#2420) 2021-08-02 16:11:05 -06:00
cmd k8s: add flush-credentials command (#2379) 2021-07-20 14:51:55 -07:00
config config: remove grpc server max connection age options (#2427) 2021-08-03 09:39:48 -06:00
databroker envoy: add full version (#2287) 2021-06-14 13:58:12 -06:00
docs Enterprise Docs (#2390) 2021-08-04 13:55:04 -05:00
examples Enterprise Docs (#2390) 2021-08-04 13:55:04 -05:00
integration log context (#2107) 2021-04-22 10:58:13 -04:00
internal telemetry: try guess hostname or external IP addr for metrics (#2412) 2021-08-03 18:10:14 -04:00
ospkg deployment: Generate deb and rpm packages (#1458) 2020-09-28 13:33:35 -04:00
pkg config: remove support for ed25519 signing keys (#2430) 2021-08-04 09:30:47 -06:00
proxy proxy: add idle timeout (#2319) 2021-07-02 10:29:53 -04:00
scripts Enterprise Docs (#2390) 2021-08-04 13:55:04 -05:00
.codecov.yml development: change codecov precision 2019-07-18 16:49:37 -07:00
.dockerignore Update build and release process for envoy embedding (#699) 2020-05-18 17:10:10 -04:00
.fossa.yml ci: convert to FOSSA scan (#2371) 2021-07-19 15:06:57 -04:00
.gitattributes assets: use embed instead of statik (#1960) 2021-03-03 18:56:55 -07:00
.gitignore envoy: add full version (#2287) 2021-06-14 13:58:12 -06:00
.golangci.yml ci: use revive instead of golint (#2370) 2021-07-16 10:26:47 -06:00
.pre-commit-config.yaml databroker: rename cache service (#1790) 2021-01-21 08:41:22 -07:00
3RD-PARTY all: refactor handler logic 2019-09-16 18:01:14 -07:00
DEBUG.MD deplyoment: add debug build / container / docs (#1513) 2020-10-13 16:54:21 -04:00
Dockerfile Include pomerium-cli in the docker image by default. Fixes #1343. (#1345) 2020-08-28 15:39:54 -04:00
Dockerfile.debug deployment: update alpine debug image dependencies (#2154) 2021-04-29 08:45:03 -06:00
go.mod chore(deps): bump gopkg.in/auth0.v5 from 5.19.1 to 5.19.2 (#2422) 2021-08-03 08:28:54 -04:00
go.sum chore(deps): bump gopkg.in/auth0.v5 from 5.19.1 to 5.19.2 (#2422) 2021-08-03 08:28:54 -04:00
LICENSE initial release 2019-01-02 12:13:36 -08:00
Makefile build: add envoy files to make clean (#2411) 2021-07-30 12:47:22 -06:00
package.json Enterprise Docs (#2390) 2021-08-04 13:55:04 -05:00
README.md docs: clarify device identity, not state, via client certs (#2428) 2021-08-03 21:46:14 -04:00
RELEASING.md v0.15 release notes (#2409) 2021-08-03 21:36:48 -04:00
SECURITY.md symlink security policy to root of project (#2396) 2021-07-26 10:42:21 -07:00
tools.go tools: add tools.go to pin go run apps (#2344) 2021-07-07 17:34:51 -06:00

pomerium logo

pomerium chat GitHub Actions Go Report Card GoDoc LICENSE Docker Pulls

Pomerium is an identity-aware proxy that enables secure access to internal applications. Pomerium provides a standardized interface to add access control to applications regardless of whether the application itself has authorization or authentication baked-in. Pomerium gateways both internal and external requests, and can be used in situations where you'd typically reach for a VPN.

Pomerium can be used to:

  • provide a single-sign-on gateway to internal applications.
  • enforce dynamic access policy based on context, identity, and device identity.
  • aggregate access logs and telemetry data.
  • a VPN alternative.

Docs

For comprehensive docs, and tutorials see our documentation.