Changeset - 9bff6004bd60
[Not reviewed]
default
0 1 0
drewp@bigasterisk.com - 20 months ago 2023-04-20 17:40:40
drewp@bigasterisk.com
turn postgres back on
1 file changed with 3 insertions and 3 deletions:
0 comments (0 inline, 0 general)
20-kube/10-pom-pom.yaml
Show inline comments
 
apiVersion: ingress.pomerium.io/v1
 
kind: Pomerium
 
metadata:
 
  name: global
 
spec:
 
  secrets: pomerium/bootstrap
 
  authenticate:
 
    url: https://authenticate.bigasterisk.com
 
  cookie:
 
    expire: 20h
 
  identityProvider:
 
    provider: oidc
 
    url: https://accounts.google.com
 
    scopes:
 
      - openid
 
      - email
 
      # adds name+locale to user details
 
      - profile
 
    secret: pomerium/idp
 
      #  storage:
 
      #    postgres:
 
      #      secret: pomerium/postgres-connection-key
 
  storage:
 
    postgres:
 
      secret: pomerium/postgres-connection-key
 
  # Note pom won't start up if this cert doesn't exist, so you have to run once
 
  # with it commented out, then after cert success, run again with it enabled.
 
  certificates: [pomerium/pomerium-proxy-tls]
0 comments (0 inline, 0 general)