mirror of
https://github.com/pomerium/pomerium.git
synced 2025-07-28 14:08:43 +02:00
b1d41607a1
## Summary There were old kustomization logic used, such as commonLabels and different patch handling. ## Related issues N/A ## User Explanation `kustomization build` will not show any warning, and the result should be exactly the same as before. ## Checklist - [ ] reference any related issues - [ ] updated unit tests - [ ] add appropriate label (`enhancement`, `bug`, `breaking`, `dependencies`, `ci`) - [ ] ready for review |
||
|---|---|---|
| .. | ||
| deployment | ||
| rbac | ||
| service | ||
| .gitignore | ||
| kustomization.yaml | ||
| namespace.yaml | ||
| pomerium-secret.yaml.example | ||
| README.md | ||
Installing Pomerium Zero
Visit https://console.pomerium.app and register for an account.
Install base pomerium zero
kubectl apply -k https://github.com/pomerium/pomerium/k8s/zero?ref=main
(that would install an evergreen main)
Create a secret with Pomerium Zero token to complete your installation
apiVersion: v1
kind: Secret
metadata:
name: pomerium
namespace: pomerium-zero
type: Opaque
stringData:
pomerium_zero_token:
kubectl apply -f pomerium-secret.yaml
Now your Pomerium deployment should be up and running.
Update Pomerium cluster configuration
- The externally available address of your Pomerium Cluster should be set to the value assigned by your Load Balancer:
kubectl get svc/pomerium-proxy -n pomerium-zero -o=jsonpath='{.status.loadBalancer.ingress[0].ip}'
- Because container is configured to run as non-root, the following should be adjusted:
- http redirect address set to
:8080 - server address set to
:8443