pomerium Files · 20-kube/10-pom-pom.yaml

Files @ 021ddfa73806

Branch filter:

Location: pomerium/20-kube/10-pom-pom.yaml

021ddfa73806 696 B text/x-yaml Show Annotation Show as Raw Download as Raw

drewp@bigasterisk.com

try things to get sessions that don't quickly expire (fetch requests have CORS errors). these may not be working

apiVersion: ingress.pomerium.io/v1
kind: Pomerium
metadata:
  name: global
spec:
  secrets: pomerium/bootstrap
  authenticate:
    url: https://authenticate.bigasterisk.com
  cookie:
    expire: 20h
  identityProvider:
    provider: oidc
    url: https://accounts.google.com
    scopes:
      - openid
      - email
      # adds name+locale to user details
      - profile
    secret: pomerium/idp
      #  storage:
      #    postgres:
      #      secret: pomerium/postgres-connection-key
  # Note pom won't start up if this cert doesn't exist, so you have to run once
  # with it commented out, then after cert success, run again with it enabled.
  certificates: [pomerium/pomerium-proxy-tls]