# Support **URL:** https://discuss.pomerium.com/c/support/9.md?page=3 [Latest](https://discuss.pomerium.com/latest.md) · [Categories](https://discuss.pomerium.com/categories.md) · [Tags](https://discuss.pomerium.com/tags.md) **Page:** 4 --- ## [Pomerium large version upgrade](https://discuss.pomerium.com/t/pomerium-large-version-upgrade/181)
**Author:** [@Wijxex](https://discuss.pomerium.com/u/Wijxex)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 4:24am UTC](https://discuss.pomerium.com/t/pomerium-large-version-upgrade/181 "2022-12-21T04:24:42Z")
What happened? Hi, I will migrate my Kubernetes cluster to v1.22 and to do so I need to fix the deprecated APIs one of them is networking.k8s.io/v1beta1 . I was reading the documentation and I came accross this changelo… --- ## [ForwardAuth with traefik 2 results in ERR\_TOO\_MANY\_REDIRECTS](https://discuss.pomerium.com/t/forwardauth-with-traefik-2-results-in-err-too-many-redirects/194)
**Author:** [@elben10](https://discuss.pomerium.com/u/elben10)\ **Replies:** 3\ **Last updated:** [December 21, 2022, 4:21am UTC](https://discuss.pomerium.com/t/forwardauth-with-traefik-2-results-in-err-too-many-redirects/194 "2022-12-21T04:21:43Z")
What happened? I receive the error code ERR\_TOO\_MANY\_REDIRECTS in chrome when I try to access the whoami service in traefik that utilizes forwardAuth in pomerium using the forwardAuth middleware in traefik. What did … --- ## [Supporting Original source filter](https://discuss.pomerium.com/t/supporting-original-source-filter/196)
**Author:** [@kumarjp](https://discuss.pomerium.com/u/kumarjp)\ **Replies:** 1\ **Last updated:** [December 19, 2022, 7:24am UTC](https://discuss.pomerium.com/t/supporting-original-source-filter/196 "2022-12-19T07:24:13Z")
I’m trying to set the original source filter listener while configuring the Envoy What happened? I set the envoy.filters.http.original\_src listener filter, with a Mark value while building the Main listener. However, t… --- ## [Postresql RDS Instance Supported?](https://discuss.pomerium.com/t/postresql-rds-instance-supported/178)
**Author:** [@kking-biometrica](https://discuss.pomerium.com/u/kking-biometrica)\ **Replies:** 5\ **Last updated:** [December 8, 2022, 5:27pm UTC](https://discuss.pomerium.com/t/postresql-rds-instance-supported/178 "2022-12-08T17:27:29Z")
What happened? When trying to use a Postgresql managed by Amazon RDS as the databroker database (Aurora or standard Postgres), we are unable to connect to the database. What did you expect to happen? Expected databroker… --- ## [Programmatic Access: Not able to get login URL](https://discuss.pomerium.com/t/programmatic-access-not-able-to-get-login-url/191)
**Author:** [@kwojkovich](https://discuss.pomerium.com/u/kwojkovich)\ **Replies:** 1\ **Last updated:** [December 5, 2022, 8:17pm UTC](https://discuss.pomerium.com/t/programmatic-access-not-able-to-get-login-url/191 "2022-12-05T20:17:28Z")
What happened? Attempted to follow Programmatic Access guide, but when I navigate to \[https://\]authenticate.corp.\[domain\].com/.pomerium/api/v1/login, I receive a “route unknown” error. What did you expect to happen? I e… --- ## [Identity verification failed when trying quick start guide (dial tcp 127.0.0.1:443: connect: connection refused)](https://discuss.pomerium.com/t/identity-verification-failed-when-trying-quick-start-guide-dial-tcp-127-0-0-1-connect-connection-refused/184)
**Author:** [@wjf3121](https://discuss.pomerium.com/u/wjf3121)\ **Replies:** 3\ **Last updated:** [November 24, 2022, 3:57pm UTC](https://discuss.pomerium.com/t/identity-verification-failed-when-trying-quick-start-guide-dial-tcp-127-0-0-1-connect-connection-refused/184 "2022-11-24T15:57:21Z")
What happened? I was getting Identity verification failed error when trying out the quick start. I was following the build from source guide, and uses Auth0 as my IDP. Below is the detailed error message: We tried to ve… --- ## [Service Account behavior (expiration and error)](https://discuss.pomerium.com/t/service-account-behavior-expiration-and-error/145)
**Author:** [@Nicolas](https://discuss.pomerium.com/u/Nicolas)\ **Replies:** 2\ **Last updated:** [November 22, 2022, 5:19pm UTC](https://discuss.pomerium.com/t/service-account-behavior-expiration-and-error/145 "2022-11-22T17:19:38Z")
What happened? Issue #1 I configured a ServiceAccount in Pomerium with an expiration date in the past. In the Pomerium Console, the token is reported as expired since X days ago. I used this token to perform a call to … --- ## [Retrieving groups from google fails with 404 error after upgrade](https://discuss.pomerium.com/t/retrieving-groups-from-google-fails-with-404-error-after-upgrade/174)
**Author:** [@byungsoo.kim](https://discuss.pomerium.com/u/byungsoo.kim)\ **Replies:** 1\ **Last updated:** [November 21, 2022, 1:36pm UTC](https://discuss.pomerium.com/t/retrieving-groups-from-google-fails-with-404-error-after-upgrade/174 "2022-11-21T13:36:19Z")
What happened? We have been using v0.11.1 for a while and decided to upgrade to v0.19.1. The pomerium server failed in retrieving directory users and groups because googleapi returned 404. The config we use works unto v0… --- ## [Websocket connections forbidden 403](https://discuss.pomerium.com/t/websocket-connections-forbidden-403/170)
**Author:** [@kerwood](https://discuss.pomerium.com/u/kerwood)\ **Replies:** 5\ **Last updated:** [November 12, 2022, 4:05pm UTC](https://discuss.pomerium.com/t/websocket-connections-forbidden-403/170 "2022-11-12T16:05:07Z")
I have a website using WebSockets running in Kubernetes. Using the website without Pomerium works just fine. As soon as I put Pomerium in the mix, I get a 403 as shown on the image below. I’m using Pomerium v0.19.1. … --- ## [Redirect inbound http to https on the same port](https://discuss.pomerium.com/t/redirect-inbound-http-to-https-on-the-same-port/168)
**Author:** [@tianze](https://discuss.pomerium.com/u/tianze)\ **Replies:** 3\ **Last updated:** [November 3, 2022, 3:53pm UTC](https://discuss.pomerium.com/t/redirect-inbound-http-to-https-on-the-same-port/168 "2022-11-03T15:53:29Z")
What happened? Is there a way to redirect inbound http requests to https on the same non-standard port using Pomerium only (i.e. without the help of external proxy such as Nginx)? For example, my routing is configured a… --- ## [Pomerium Verify Identity Verification Failed](https://discuss.pomerium.com/t/pomerium-verify-identity-verification-failed/165)
**Author:** [@aadhi0319](https://discuss.pomerium.com/u/aadhi0319)\ **Replies:** 2\ **Last updated:** [October 17, 2022, 11:43pm UTC](https://discuss.pomerium.com/t/pomerium-verify-identity-verification-failed/165 "2022-10-17T23:43:23Z")
What happened? I was following the Pomerium docker quickstart guide and Pomerium Verify cannot identify me. https://authenticate.\ can identify me correctly, but https://verify.\ says it did not get the… --- ## [Example Docker Compose Fails to Start Any Containers](https://discuss.pomerium.com/t/example-docker-compose-fails-to-start-any-containers/162)
**Author:** [@aadhi0319](https://discuss.pomerium.com/u/aadhi0319)\ **Replies:** 5\ **Last updated:** [October 16, 2022, 2:06am UTC](https://discuss.pomerium.com/t/example-docker-compose-fails-to-start-any-containers/162 "2022-10-16T02:06:10Z")
What happened? I am new to Pomerium and I was following the docker startup guide. Both containers failed to start. There seems to be an issue with allocating memory for at least one of the two containers. What did you e… --- ## [No healthy upstream with all in one container](https://discuss.pomerium.com/t/no-healthy-upstream-with-all-in-one-container/164)
**Author:** [@Ashex](https://discuss.pomerium.com/u/Ashex)\ **Replies:** 3\ **Last updated:** [October 5, 2022, 3:48am UTC](https://discuss.pomerium.com/t/no-healthy-upstream-with-all-in-one-container/164 "2022-10-05T03:48:46Z")
What happened? I would like to setup Pomerium to handle SSO for several docker based services. The goal is to have it serve as a proxy to the other services and protect with simple SSO where each service is running via s… --- ## [Databroker stuck getting no\_helathy\_upstream errors](https://discuss.pomerium.com/t/databroker-stuck-getting-no-helathy-upstream-errors/160)
**Author:** [@munene](https://discuss.pomerium.com/u/munene)\ **Replies:** 1\ **Last updated:** [September 30, 2022, 1:00am UTC](https://discuss.pomerium.com/t/databroker-stuck-getting-no-helathy-upstream-errors/160 "2022-09-30T01:00:16Z")
What happened? using pomerium 17.1 in RKE2 kubernetes clusters VMs are running RHEL 8.5 an idp setup and service routes Clusters running on aws VMs run fine. On other privately provision VM, pod seems healthy but acc… --- ## [Kubernetes - Ingress - Multiple IDP?](https://discuss.pomerium.com/t/kubernetes-ingress-multiple-idp/155)
**Author:** [@darwiner](https://discuss.pomerium.com/u/darwiner)\ **Replies:** 3\ **Last updated:** [September 23, 2022, 1:33pm UTC](https://discuss.pomerium.com/t/kubernetes-ingress-multiple-idp/155 "2022-09-23T13:33:16Z")
What happened? Hey there, I’ve gone through the Kubernetes Quickstart document and have been able to successfully setup Pomerium with an integration in place with Okta. Everything seems to be working as I would expect … --- ## [Operator Upgrade to Ingress Controller Error](https://discuss.pomerium.com/t/operator-upgrade-to-ingress-controller-error/158)
**Author:** [@jawabuu](https://discuss.pomerium.com/u/jawabuu)\ **Replies:** 1\ **Last updated:** [September 20, 2022, 11:58am UTC](https://discuss.pomerium.com/t/operator-upgrade-to-ingress-controller-error/158 "2022-09-20T11:58:24Z")
What happened? I upgraded from operator to ingress-controller using chart version: 28.0.2 What did you expect to happen? Define ingresscontroller as per your guide ingressController: enabled: true image… --- ## [Other Applications behind Pomerium](https://discuss.pomerium.com/t/other-applications-behind-pomerium/152)
**Author:** [@Grafnus](https://discuss.pomerium.com/u/Grafnus)\ **Replies:** 1\ **Last updated:** [September 16, 2022, 9:25pm UTC](https://discuss.pomerium.com/t/other-applications-behind-pomerium/152 "2022-09-16T21:25:05Z")
What happened? I came accross Pomerium and found it really interessting. I am thinking of using it to get the user authentification under the same easy roof. Now I am not sure what Pomerium is truly capable of. I want t… --- ## [Kubernetes | Ingress Controller | v0.18.0 | Ingress controller is processing non-pomerium ingresses](https://discuss.pomerium.com/t/kubernetes-ingress-controller-v0-18-0-ingress-controller-is-processing-non-pomerium-ingresses/148)
**Author:** [@ulfox](https://discuss.pomerium.com/u/ulfox)\ **Replies:** 4\ **Last updated:** [August 31, 2022, 9:30pm UTC](https://discuss.pomerium.com/t/kubernetes-ingress-controller-v0-18-0-ingress-controller-is-processing-non-pomerium-ingresses/148 "2022-08-31T21:30:29Z")
What happened? Hi team, In the ingress documentation, there is this warning block Only one Ingress Controller instance is supported per Pomerium cluster. Does this mean, 1 Pomerium ingress controller or 1 ingress cont… --- ## [Deployment architecture](https://discuss.pomerium.com/t/deployment-architecture/139)
**Author:** [@luckyraul](https://discuss.pomerium.com/u/luckyraul)\ **Replies:** 5\ **Last updated:** [August 26, 2022, 9:41am UTC](https://discuss.pomerium.com/t/deployment-architecture/139 "2022-08-26T09:41:08Z")
What happened? I want to implement Pomerium in our infrastructure to protect some critical services. We have several clusters with multiple services in each other. I need to create layer of protection with keycloak auth… --- ## [Keep session alive](https://discuss.pomerium.com/t/keep-session-alive/118)
**Author:** [@Nicolas](https://discuss.pomerium.com/u/Nicolas)\ **Replies:** 5\ **Last updated:** [August 23, 2022, 3:07pm UTC](https://discuss.pomerium.com/t/keep-session-alive/118 "2022-08-23T15:07:51Z")
Question? I am looking for a way to extend Pomerium session automatically if the user is active. Currently, I am using the default cookie expiration: 14h. I would like to be able to close sooner the user session if the … --- ## [Link a service account to a user from Keycloak idp](https://discuss.pomerium.com/t/link-a-service-account-to-a-user-from-keycloak-idp/143)
**Author:** [@Nicolas](https://discuss.pomerium.com/u/Nicolas)\ **Replies:** 1\ **Last updated:** [August 10, 2022, 5:55pm UTC](https://discuss.pomerium.com/t/link-a-service-account-to-a-user-from-keycloak-idp/143 "2022-08-10T17:55:41Z")
What happened? We have deployed Pomerium Enterprise in order to use the Service Accounts functionality. When opening Pomerium Console, going to Service Accounts page and then creating a new service account, we are presen… --- ## [How to reject connections to routes not specified?](https://discuss.pomerium.com/t/how-to-reject-connections-to-routes-not-specified/141)
**Author:** [@ajcollett](https://discuss.pomerium.com/u/ajcollett)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 6:41am UTC](https://discuss.pomerium.com/t/how-to-reject-connections-to-routes-not-specified/141 "2022-08-03T06:41:55Z")
What happened? I have Pomerium setup, as a binary, on an “edge” server, that reverse proxies our internal sites that need to be exposed to the world. Pretty standard. I use LetsEncrypt and autocert, which works great. H… --- ## [Second login required when trying to sign\_out an active session](https://discuss.pomerium.com/t/second-login-required-when-trying-to-sign-out-an-active-session/135)
**Author:** [@svKr](https://discuss.pomerium.com/u/svKr)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 7:26am UTC](https://discuss.pomerium.com/t/second-login-required-when-trying-to-sign-out-an-active-session/135 "2022-07-07T07:26:48Z")
What happened? There is a second login required when calling the sign\_out url on an active session. What did you expect to happen? Being able to sign out of an active session without having to log in for a second time. … --- ## [Using Pomerium with a backend service that is using Google SSO](https://discuss.pomerium.com/t/using-pomerium-with-a-backend-service-that-is-using-google-sso/134)
**Author:** [@ulfox](https://discuss.pomerium.com/u/ulfox)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 12:08pm UTC](https://discuss.pomerium.com/t/using-pomerium-with-a-backend-service-that-is-using-google-sso/134 "2022-07-05T12:08:33Z")
Issue Description We have deployed Pomerium and up to now everything works great! There is one configuration we are currently struggling with, which is displayed below Additional Information: We have IngresOne: ingre… --- ## [Exec pomerium-cli proxy got 421 error](https://discuss.pomerium.com/t/exec-pomerium-cli-proxy-got-421-error/132)
**Author:** [@rogerw](https://discuss.pomerium.com/u/rogerw)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 1:15am UTC](https://discuss.pomerium.com/t/exec-pomerium-cli-proxy-got-421-error/132 "2022-06-23T01:15:50Z")
What happened? i try use:pomerium-cli proxy --listen :22345 --proxy-domain example.com but i got a error: ERR Failed to run TCP tunnel error=“invalid http response code: 421” the proxy log: {“level”:“info”,“service”:“… --- ## [Azure AD multitenant - what goes in allowed\_domains?](https://discuss.pomerium.com/t/azure-ad-multitenant-what-goes-in-allowed-domains/128)
**Author:** [@patrick132135](https://discuss.pomerium.com/u/patrick132135)\ **Replies:** 2\ **Last updated:** [June 22, 2022, 9:45pm UTC](https://discuss.pomerium.com/t/azure-ad-multitenant-what-goes-in-allowed-domains/128 "2022-06-22T21:45:46Z")
What happened? I’m using Azure AD as my identity provider. I followed Microsoft Entra ID (formerly Azure Active Directory) | Pomerium and am able to login and view authenticate.example.com/.pomerium. However, when I conf… --- ## [Pomerium-databroker pod CrashLoopBackOff](https://discuss.pomerium.com/t/pomerium-databroker-pod-crashloopbackoff/126)
**Author:** [@SeanYuan](https://discuss.pomerium.com/u/SeanYuan)\ **Replies:** 2\ **Last updated:** [June 2, 2022, 6:45am UTC](https://discuss.pomerium.com/t/pomerium-databroker-pod-crashloopbackoff/126 "2022-06-02T06:45:02Z")
Hi Expert: sorry to bother, What happened? after helm installation, the pomerium-databroker pod and redis pod cannot be running What did you expect to happen? How’d it happen? the pods status is shown below databro… --- ## [How to use pomerium in istio mesh mTLS mode STRICT?](https://discuss.pomerium.com/t/how-to-use-pomerium-in-istio-mesh-mtls-mode-strict/124)
**Author:** [@munene](https://discuss.pomerium.com/u/munene)\ **Replies:** 1\ **Last updated:** [May 28, 2022, 5:15am UTC](https://discuss.pomerium.com/t/how-to-use-pomerium-in-istio-mesh-mtls-mode-strict/124 "2022-05-28T05:15:34Z")
What happened? I have pomerium v0.17.2 in an rke2 cluster, running with istio installed. All pods happily talking to each other. I turn on istio injection, permissive mode. Everyone still happy. Connect to Redis - works … --- ## [ERR\_TOO\_MANY\_REDIRECTS after authenticating (Traefik + Pomerium + Keycloak)](https://discuss.pomerium.com/t/err-too-many-redirects-after-authenticating-traefik-pomerium-keycloak/116)
**Author:** [@bricegba](https://discuss.pomerium.com/u/bricegba)\ **Replies:** 10\ **Last updated:** [May 14, 2022, 10:14am UTC](https://discuss.pomerium.com/t/err-too-many-redirects-after-authenticating-traefik-pomerium-keycloak/116 "2022-05-14T10:14:34Z")
What happened? After filling in the authentication information on the Keycloak login page, I end up on a blank page with the error ERR\_TOO\_MANY\_REDIRECTS. What did you expect to happen? I hope to be redirected to the ho… --- ## [500 error while Running pomerium-helm on eks behind NLB](https://discuss.pomerium.com/t/500-error-while-running-pomerium-helm-on-eks-behind-nlb/105)
**Author:** [@sgk](https://discuss.pomerium.com/u/sgk)\ **Replies:** 5\ **Last updated:** [May 6, 2022, 9:27pm UTC](https://discuss.pomerium.com/t/500-error-while-running-pomerium-helm-on-eks-behind-nlb/105 "2022-05-06T21:27:22Z")
What happened? After creating a tunnel using $ pomerium-cli tcp worker1-iap.orgdomain.io:22 listening on 127.0.0.1:34523 error serving local connection: invalid http response code: 500 from a second terminal, while ss… [Previous page](https://discuss.pomerium.com/c/support/9.md?page=2) [Next page](https://discuss.pomerium.com/c/support/9.md?page=4)