Denis Mishin

1. setting to `"disable": true` is incompatible with the fact that it's a map[string]string, so it should be `{"disable":"anything really"}` https://github.com/pomerium/pomerium/blob/88915a79c1c612cbca5db5a2633f4a673afe7c8f/pkg/grpc/config/config.proto#L97 2. the docs in https://www.pomerium.com/docs/reference/set-response-headers are not very helpful...

currently it results in `disable:true` appear in the response headers, and default headers are still present.

1. currently, disable: true does not seem to work, despite the code is there, maybe they're also set elsewhere 2. I couldn't understand the expected outcome from reading the docs,...

this bug describes a _per-route_ option and not a global one. IC sets https://github.com/pomerium/pomerium/blob/88915a79c1c612cbca5db5a2633f4a673afe7c8f/pkg/grpc/config/config.proto#L97 via annotation. https://www.pomerium.com/docs/reference/routes/set-response-headers

`path: /sonarr` stands for "exact match". that particular request is responded with HTTP 200 OK in your logs. what happens next is you've got other files requests such as `/initialize.js`...

@kenjenkins if the server is configured to listen at port `8443` (`address: ":8443"`) while running behind a TCP load balancer that forwards requests arriving to `one.example.com:443` to Pomerium host:8443, your...

i think there's an email alert when action fails, but opening an issue might be nice indeed. not sure how to prevent duplicate issues being open each time the action...

https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto#enum-extensions-filters-network-http-connection-manager-v3-httpconnectionmanager-codectype AUTO (DEFAULT) ⁣For every new connection, the connection manager will determine which codec to use. This mode supports both ALPN for TLS listeners as well as **protocol inference for...

there might be something that prevented the authenticate Ingress from being applied. it's usually posted as events (but api server does not hold them for too long), cause what you...

I see you are running in Kubernetes, we have a recommended way of deploying to K8S https://www.pomerium.com/docs/deploy/k8s/install and it [integrates with the `cert-manager`](https://cert-manager.io/docs/tutorials/acme/pomerium-ingress/) which is a preferred way to acquire...