Files
@ 021ddfa73806
Branch filter:
Location: pomerium/20-kube/10-pom-pom.yaml - annotation
021ddfa73806
696 B
text/x-yaml
try things to get sessions that don't quickly expire (fetch requests have CORS errors). these may not be working
0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 021ddfa73806 021ddfa73806 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 0ae82df13719 021ddfa73806 021ddfa73806 021ddfa73806 0ae82df13719 0ae82df13719 0ae82df13719 | apiVersion: ingress.pomerium.io/v1
kind: Pomerium
metadata:
name: global
spec:
secrets: pomerium/bootstrap
authenticate:
url: https://authenticate.bigasterisk.com
cookie:
expire: 20h
identityProvider:
provider: oidc
url: https://accounts.google.com
scopes:
- openid
- email
# adds name+locale to user details
- profile
secret: pomerium/idp
# storage:
# postgres:
# secret: pomerium/postgres-connection-key
# Note pom won't start up if this cert doesn't exist, so you have to run once
# with it commented out, then after cert success, run again with it enabled.
certificates: [pomerium/pomerium-proxy-tls]
|