Denis Mishin

I see we accept both files and b64 strings there. That explains how cert data from the databroker got into the `certFile` field. https://github.com/pomerium/internal/issues/915 may I suggest we resolve the...

ci: check goreleaser options are still compatible

2

## Summary `goreleaser` deprecated a lot of options and in general we don't want to be caught by a surprise during release process. we will run a check once a...

when the new route becomes available

2

**Is your feature request related to a problem? Please describe.** This inquiry stems from the need to determine whether a new route has been successfully propagated from the console to...

Incorrect linting of test functions with t.Parallel() inside closures returned by functions within t.Run()

2

the "good" example referenced in https://github.com/kunwardeep/paralleltest#missing-tparallel-in-the-range-method is incorrect, as it would always capture the last value of the variable `tc` ```go // good func TestFunctionRangeMissingCallToParallel(t *testing.T) { t.Parallel() testCases :=...

health-checks: zero route availability improvements

1

## Summary This PR does some improvements to the Zero Route Availability health check: - ignores certificate errors, as the point of that health check is not to check the...

## Summary ## Related issues ## User Explanation ## Checklist - [ ] reference any related issues - [ ] updated docs - [ ] updated unit tests - [...

envoy: set merge_slashes: true

1

## Summary sets [`merge_slashes: true`](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto#envoy-v3-api-field-extensions-filters-network-http-connection-manager-v3-httpconnectionmanager-merge-slashes) as per [best practices](https://www.envoyproxy.io/docs/envoy/latest/configuration/best_practices/edge) ## Related issues Related: https://github.com/pomerium/internal/issues/1733 ## User Explanation ## Checklist - [ ] reference any related issues - [ ] updated...

envoy: unescape and redirect if path contains escaped values

1

## Summary In order to disambiguate path evaluation, make sure it is RFC3986 compliant, by unescaping and redirecting an incoming request that contains escaped slashes. ## Related issues Related: https://github.com/pomerium/internal/issues/1733...

upgrade to k8s v30, controller-runtime v15

1

**Is your feature request related to a problem? Please describe.** in order to upgrade to K8S API v30, several breaking changes in the controller-runtime https://github.com/kubernetes-sigs/controller-runtime/pull/2783 have to be resolved **Describe...