Pomerium is an identity and context-aware access proxy.
Find a file
dependabot[bot] a83c4e5470
chore(deps): bump github.com/envoyproxy/protoc-gen-validate from 0.10.1 to 1.0.0 (#4155)
chore(deps): bump github.com/envoyproxy/protoc-gen-validate

Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate) from 0.10.1 to 1.0.0.
- [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases)
- [Changelog](https://github.com/bufbuild/protoc-gen-validate/blob/main/.goreleaser.yaml)
- [Commits](https://github.com/envoyproxy/protoc-gen-validate/compare/v0.10.1...v1.0.0)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/protoc-gen-validate
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-08 10:36:29 -06:00
.github chore(deps): bump docker/setup-buildx-action from 2.4.1 to 2.5.0 (#4154) 2023-05-08 10:35:06 -06:00
.vscode use tlsClientConfig instead of custom dialer (#3830) 2022-12-27 09:55:36 -07:00
authenticate config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00
authorize config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
cmd/pomerium chore(deps): bump github.com/golangci/golangci-lint from 1.48.0 to 1.50.0 (#3667) 2022-10-19 09:36:59 -06:00
config envoyconfig: disable validation context when no client certificates are required (#4151) 2023-05-04 15:32:14 -06:00
databroker config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
examples Update grafana.ini.yml (#4045) 2023-03-08 09:18:50 -07:00
integration config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
internal config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00
ospkg move directory providers (#3633) 2022-11-03 11:33:56 -06:00
pkg config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00
proxy config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00
scripts dependencies: upgrade go and envoy (#4116) 2023-04-17 16:44:58 -06:00
ui authenticate: add additional error details for hmac errors (#3878) 2023-01-11 07:53:11 -07:00
.codecov.yml
.dockerignore
.fossa.yml
.gitattributes
.gitignore tls: wildcard catch-all cert must be at the end of cert list (#4119) 2023-04-21 12:37:32 -04:00
.golangci.yml config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
.pre-commit-config.yaml
.tool-versions dependencies: upgrade go and envoy (#4116) 2023-04-17 16:44:58 -06:00
3RD-PARTY
DEBUG.MD
Dockerfile chore(deps): bump debian from 1fbdbcf to 4291be2 (#4160) 2023-05-08 10:35:53 -06:00
Dockerfile.debug chore(deps): bump debian from 1fbdbcf to 4291be2 (#4160) 2023-05-08 10:35:53 -06:00
go.mod chore(deps): bump github.com/envoyproxy/protoc-gen-validate from 0.10.1 to 1.0.0 (#4155) 2023-05-08 10:36:29 -06:00
go.sum chore(deps): bump github.com/envoyproxy/protoc-gen-validate from 0.10.1 to 1.0.0 (#4155) 2023-05-08 10:36:29 -06:00
LICENSE
Makefile config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
pomerium.go
README.md Update README.md (#4146) 2023-05-02 08:08:49 -06:00
RELEASING.md deployment: update RELEASING.md (#3503) 2022-08-16 10:40:03 -07:00
SECURITY.md Update SECURITY.md (#4144) 2023-05-01 15:17:50 -04:00
tools.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00

pomerium logo

Go Report Card GoDoc LICENSE Docker Pulls

Pomerium is an identity and context-aware reverse proxy that brokers secure access to apps and services at scale. Pomerium provides a standardized interface to add access control to applications regardless of whether the application itself has authorization or authentication baked-in.

Pomerium can be used in situations where you'd typically reach for a VPN, but, unlike a VPN, does not require a client and uses identity and context, not network locality to determine access.

Pomerium can be used to:

  • provide a single-sign-on gateway to internal applications.
  • enforce dynamic access policy based on context, identity, and device identity.
  • aggregate access logs and telemetry data.
  • a VPN alternative.

Docs

For comprehensive docs, and tutorials see our documentation.

Integration Tests

To run the integration tests locally, first build a local development image:

./scripts/build-dev-docker.bash

Next go to the integration/clusters folder and pick a cluster, for example google-single, then use docker-compose to start the cluster. We use an environment variable to specify the dev docker image we built earlier:

cd integration/clusters/google-single
env POMERIUM_TAG=dev docker-compose up -V

Once that's up and running you can run the integration tests from another terminal:

go test -count=1 -v ./integration/...

If you need to make a change to the clusters themselves, there's a tpl folder that contains jsonnet files. Make a change and then rebuild the clusters by running:

go run ./integration/cmd/pomerium-integration-tests/ generate-configuration