robincher / pomerium-kubernetes-recipe

Kubernetes recipe for Pomerium Identity Aware Proxy

Pomerium Kubernetes Recipe

Introduction

Pomerium is a Identity aware proxy that aim to provide secure access from an untrusted network to your upstream services.

This repository is a collection of recipes for deploying Pomerium into a Kubernetes cluster.

I have written a detailed post about the implementation and motivation behind this deploying Pomerium IAP

Preparation

This recipe is tested with the following

1. AWS Elastic Kubernetes Service (EKS) 1.17
2. Application LoadBalancer with HTTPS
3. Nginx Ingress (Optional) for Kubernetes Cluster - You can set-up Pomerium proxy service as a node port and bind directly to the Application Load Balancer

System Context

Directory Structure

|- assets
|- workloads
|-- pomerium
|-- common

1. Pomerium : Consists of all Pomerium related resources
2. Common : Other resources like mock services

References

• Pomerium Official Website
• Post on Pomerium with EKS