pomerium/config
Joe Kralicky e3e7de741c
envoy: support http2 prior knowledge for insecure upstream targets (#5205)
This allows using the scheme 'h2c' to indicate http2 prior knowledge for
insecure upstream servers. This can be used to perform TLS termination for
GRPC servers configured with insecure credentials.

As an example, this allows the following route configuration:

routes:
  - from: https://grpc.localhost.pomerium.io
    to: h2c://localhost:9090
2024-08-13 13:40:44 -04:00
..
envoyconfig envoy: support http2 prior knowledge for insecure upstream targets (#5205) 2024-08-13 13:40:44 -04:00
testdata config: additional kubernetes token source support (#1200) 2020-08-04 09:40:51 -04:00
autocert.go core/ci: update linting (#4844) 2023-12-14 09:07:54 -08:00
autocert_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
codec_type.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
codec_type_test.go config: default to http2 (#3660) 2022-10-12 14:46:06 -06:00
config.go config: allow overriding port numbers using environment variables (#5194) 2024-08-01 14:55:52 -04:00
config_source.go Add runtime flag to allow disabling config hot-reload (#5079) (#5112) 2024-06-12 23:20:30 -04:00
config_source_test.go Add runtime flag to allow disabling config hot-reload (#5079) (#5112) 2024-06-12 23:20:30 -04:00
constants.go core/config: implement direct response (#4960) 2024-02-15 14:33:56 -07:00
crypt.go cryptutil: always use kek public id, add x509 support (#2066) 2021-04-07 09:44:36 -07:00
custom.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
custom_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
doc.go *: remove import path comments (#545) 2020-03-16 10:13:47 -07:00
from.go core/config: add support for stripping the port for matching routes (#5085) 2024-04-26 08:24:46 -06:00
from_test.go core/config: add support for stripping the port for matching routes (#5085) 2024-04-26 08:24:46 -06:00
helpers.go core/redis: remove redis (#4768) 2023-11-28 13:14:36 -07:00
helpers_test.go databroker: rename cache service (#1790) 2021-01-21 08:41:22 -07:00
http.go use tlsClientConfig instead of custom dialer (#3830) 2022-12-27 09:55:36 -07:00
http_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
identity.go core/authorize: require new login when authenticate url changes (#5165) 2024-07-12 10:57:41 -06:00
layered.go core/ci: update linting (#4844) 2023-12-14 09:07:54 -08:00
layered_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
log.go core/config: remove debug option, always use json logs (#4857) 2023-12-15 11:29:05 -07:00
log_level.go config: validate log levels (#4367) 2023-07-17 16:41:48 -06:00
metrics.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
metrics_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
mtls.go add mTLS UserPrincipalName SAN match (#5177) 2024-07-26 10:23:19 -07:00
mtls_test.go add mTLS UserPrincipalName SAN match (#5177) 2024-07-26 10:23:19 -07:00
options.go core/identity: dynamic authenticator registration (#5105) 2024-05-07 16:45:39 -06:00
options_check.go config: remove deprecated client_ca option (#4918) 2024-01-30 14:12:23 -08:00
options_test.go core/identity: dynamic authenticator registration (#5105) 2024-05-07 16:45:39 -06:00
policy.go core/identity: dynamic authenticator registration (#5105) 2024-05-07 16:45:39 -06:00
policy_ppl.go authorize: omit client cert rule when not needed (#4386) 2023-07-24 15:27:57 -07:00
policy_ppl_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
policy_test.go core/config: add support for stripping the port for matching routes (#5085) 2024-04-26 08:24:46 -06:00
runtime_flags.go Add runtime flag to allow disabling config hot-reload (#5079) (#5112) 2024-06-12 23:20:30 -04:00
session.go core/config: remove cookie secure option (#4907) 2024-01-12 13:28:14 -07:00
session_test.go core/authorize: require new login when authenticate url changes (#5165) 2024-07-12 10:57:41 -06:00
trace.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
trace_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
validate.go config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00