Denis Mishin

provide a way to try new pomerium releases

1

**Is your feature request related to a problem? Please describe.** Sometimes, users are upgrading from installations that are very old - i.e. helm based installs that may even be config...

[P3] validate Ingress parameter combination

2

**Is your feature request related to a problem? Please describe.** Not all combinations of parameters are compatible, i.e. 1. TCP routes do not support certain annotations such as `secure_upstream` 2....

**Is your feature request related to a problem? Please describe.** IDEs such as VSCode provide syntax and help for known file formats, including Kubernetes objects.  It would be useful...

**Is your feature request related to a problem? Please describe.** Currently, Ingress controller accepts namespaces to watch for Ingress resources via `--namespaces` runtime option, which may be manually provided via...

[low] check TLS cert secret actually matches the host

1

**Is your feature request related to a problem? Please describe.** apparently `cert-manager` would not complain if you specify an ingress and define `host` that does not match the contents of...

docker: pomerium/pomerium:main does not have version

3

## What happened? `pomerium/pomerium:main` misses version information, just the git commit information ``` $ docker run pomerium/pomerium:main {"envoy_version":"1.30.2+c87108bd0656a94c637ef161bb0e94620136e99c4f5b1e5e0b95bfc97383099f","version":"+7eca911","time":"2024-06-20T23:08:46Z","message":"cmd/pomerium"} ``` ## What did you expect to happen? The version information to...

zero/k8s: use deployments

1

## Summary Previously, Pomerium in Zero mode was deployed using `StatefulSet` and required a PVC to store the bootstrap piece. Support to store the bootstrap piece in a kubernetes secret...

cert-index: add delete, fix usage bitmask

1

## Summary Adds `Delete` method to `CertificatesIndex` so that certificate data may be deleted from the index. Also fixes an issue that overlapping certs with non-conflicting usages would not persist...

allow using `pomerium-controller` mounted service account for the api server access

1

**Is your feature request related to a problem? Please describe.** currently we support referencing external token from a Secret. https://github.com/pomerium/ingress-controller/blob/9a75ad2bc4716f0c54d1cbc6da8101b1359434ec/model/ingress_config.go#L40-L43 This is [no longer a recommended method since Kubernetes 1.22](https://kubernetes.io/docs/reference/access-authn-authz/service-accounts-admin/#manual-secret-management-for-serviceaccounts):...

support SET variable in queries

7

while I can put `SET ROLE` in the queries, I cannot do `SET variable TO value` before queries, which is useful if I have row based security policies that utilize...