# Latest **URL:** https://discuss.pomerium.com/latest.md [Latest](https://discuss.pomerium.com/latest.md) · [Categories](https://discuss.pomerium.com/categories.md) · [Tags](https://discuss.pomerium.com/tags.md) --- ## [Artifact Hub ownership claim for the Pomerium Helm repository](https://discuss.pomerium.com/t/artifact-hub-ownership-claim-for-the-pomerium-helm-repository/513)
**Author:** [@mrlunchbox777](https://discuss.pomerium.com/u/mrlunchbox777)\ **Replies:** 0\ **Last updated:** [July 31, 2026, 8:37pm UTC](https://discuss.pomerium.com/t/artifact-hub-ownership-claim-for-the-pomerium-helm-repository/513 "2026-07-31T20:37:31Z")
What happened? Hello, I am reaching out about the Artifact Hub repository for Pomerium: Helm currently receives notifications for this listing. The validated Helm source is https://helm.pomerium.io/, published by Git… --- ## [Allow\_websockets](https://discuss.pomerium.com/t/allow-websockets/511)
**Author:** [@franklin](https://discuss.pomerium.com/u/franklin)\ **Replies:** 2\ **Last updated:** [June 9, 2026, 5:44am UTC](https://discuss.pomerium.com/t/allow-websockets/511 "2026-06-09T05:44:52Z")
What happened? WebSocket connections are blocked with 403 upgrade\_failed when using Pomerium Gateway API mode. Terminals and kernels in JupyterLab are completely non-functional. What did you expect to happen? WebSocke… --- ## [Need 'scope' claim in JWT](https://discuss.pomerium.com/t/need-scope-claim-in-jwt/510)
**Author:** [@dwatrous](https://discuss.pomerium.com/u/dwatrous)\ **Replies:** 1\ **Last updated:** [June 3, 2026, 10:26pm UTC](https://discuss.pomerium.com/t/need-scope-claim-in-jwt/510 "2026-06-03T22:26:49Z")
What happened? I’m using the pomerium JWT as a bearer token and configured snowflake to validate the JWT against the JWKS endpoint. Unfortunately snowflake requires a scope claim, and I can’t see a way to include that in… --- ## [Confused about the best way to install Pomerium Zero on K8s](https://discuss.pomerium.com/t/confused-about-the-best-way-to-install-pomerium-zero-on-k8s/507)
**Author:** [@ab89](https://discuss.pomerium.com/u/ab89)\ **Replies:** 1\ **Last updated:** [April 9, 2026, 11:51pm UTC](https://discuss.pomerium.com/t/confused-about-the-best-way-to-install-pomerium-zero-on-k8s/507 "2026-04-09T23:51:59Z")
What happened? I installed Pomerium Zero using the helm chart. The chart is still on version 0.29 and doesn’t seem supported. Some of the links in the doc seem broken. I would like to use the MCP features. But it is unc… --- ## [WebSocket "Socket Hang Up" / Empty Reply on Ingress Controller v0.32.5 with Internal LB Upstream](https://discuss.pomerium.com/t/websocket-socket-hang-up-empty-reply-on-ingress-controller-v0-32-5-with-internal-lb-upstream/508)
**Author:** [@dwatrous](https://discuss.pomerium.com/u/dwatrous)\ **Replies:** 3\ **Last updated:** [April 9, 2026, 12:47am UTC](https://discuss.pomerium.com/t/websocket-socket-hang-up-empty-reply-on-ingress-controller-v0-32-5-with-internal-lb-upstream/508 "2026-04-09T00:47:12Z")
Environment Pomerium Ingress Controller: v0.32.5 Infrastructure: GKE Private Cluster Upstream: Google Internal Application Load Balancer (L7) via Serverless Network Endpoint Group (PSC) to Cloud Run. Traffic Flow: Brow… --- ## [SSE (eventstream) not working through pomerium](https://discuss.pomerium.com/t/sse-eventstream-not-working-through-pomerium/504)
**Author:** [@dwatrous](https://discuss.pomerium.com/u/dwatrous)\ **Replies:** 1\ **Last updated:** [April 6, 2026, 11:05pm UTC](https://discuss.pomerium.com/t/sse-eventstream-not-working-through-pomerium/504 "2026-04-06T23:05:01Z")
Pomerium Forum Post: Server-Sent Events Not Streaming in Real-Time Through Ingress What happened? Backstage scaffolder task logs do not stream in real-time through Pomerium ingress. When users run a template/scaffolder t… --- ## [Confused about user refresh of claims](https://discuss.pomerium.com/t/confused-about-user-refresh-of-claims/502)
**Author:** [@bertp](https://discuss.pomerium.com/u/bertp)\ **Replies:** 10\ **Last updated:** [March 23, 2026, 3:19pm UTC](https://discuss.pomerium.com/t/confused-about-user-refresh-of-claims/502 "2026-03-23T15:19:27Z")
What happened? I’ve setup Pomerium core successfully with a couple of routes and custom identity provider (azure). This is in a lab-environment. One of my services (vaultwarden.pomerium.localhost) has a policy to match a… --- ## [EKS Kubernetes API access via Pomerium](https://discuss.pomerium.com/t/eks-kubernetes-api-access-via-pomerium/500)
**Author:** [@m1g0r](https://discuss.pomerium.com/u/m1g0r)\ **Replies:** 2\ **Last updated:** [March 9, 2026, 8:43pm UTC](https://discuss.pomerium.com/t/eks-kubernetes-api-access-via-pomerium/500 "2026-03-09T20:43:41Z")
Hello, I would like to configure access to Kubernetes API (Amazon EKS v1.34) via Pomerium using this doc: Kubernetes \`kubectl\` Integration | Pomerium and User Impersonation methods of authenticating to the Kubernetes AP… --- ## [Proxy Protocol Causing Issues with Non-HTTPS Requests](https://discuss.pomerium.com/t/proxy-protocol-causing-issues-with-non-https-requests/437)
**Author:** [@renatomjr](https://discuss.pomerium.com/u/renatomjr)\ **Replies:** 5\ **Last updated:** [March 8, 2026, 2:32am UTC](https://discuss.pomerium.com/t/proxy-protocol-causing-issues-with-non-https-requests/437 "2026-03-08T02:32:41Z")
When enabling the proxy protocol on both the AWS NLB and the Pomerium Ingress Controller, all non-HTTPS requests (handled by the redirect server) return a 400 Bad Request error. This behavior is preventing ACME HTTP-01 c… --- ## [ACME HTTP-01 challenge: failed to perform self check (redirect to https)](https://discuss.pomerium.com/t/acme-http-01-challenge-failed-to-perform-self-check-redirect-to-https/501)
**Author:** [@akhayyat](https://discuss.pomerium.com/u/akhayyat)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 2:07am UTC](https://discuss.pomerium.com/t/acme-http-01-challenge-failed-to-perform-self-check-redirect-to-https/501 "2026-02-26T02:07:09Z")
What happened? After installing Pomerium using the k8s yaml manifest, visiting Pomerium’s URL shows the following browser error: Error code: PR\_CONNECT\_RESET\_ERROR pomerium-proxy service log: {"level":"info","ts":"202… --- ## [Testing Pomerium Enterprise locally with FleetDM – is it possible?](https://discuss.pomerium.com/t/testing-pomerium-enterprise-locally-with-fleetdm-is-it-possible/499)
**Author:** [@Monsieurpatate](https://discuss.pomerium.com/u/Monsieurpatate)\ **Replies:** 1\ **Last updated:** [December 1, 2025, 6:45pm UTC](https://discuss.pomerium.com/t/testing-pomerium-enterprise-locally-with-fleetdm-is-it-possible/499 "2025-12-01T18:45:15Z")
What happened? I want to test Pomerium Enterprise locally in a fully isolated lab environment on my PC, without any public IP addresses. My goal is to evaluate FleetDM Device Identity, PPL policies, and the advanced inte… --- ## [First-time installation; questions about integrations](https://discuss.pomerium.com/t/first-time-installation-questions-about-integrations/498)
**Author:** [@IngwiePhoenix](https://discuss.pomerium.com/u/IngwiePhoenix)\ **Replies:** 3\ **Last updated:** [October 24, 2025, 10:00pm UTC](https://discuss.pomerium.com/t/first-time-installation-questions-about-integrations/498 "2025-10-24T22:00:29Z")
What happened? I am currently preparing the structure for basically the second - and first actually really proper - version of my homelab. After literally a whole year of digging around for certain solutions to my proble… --- ## ["contains" operator for Claim Criterion](https://discuss.pomerium.com/t/contains-operator-for-claim-criterion/487)
**Author:** [@vijay](https://discuss.pomerium.com/u/vijay)\ **Replies:** 2\ **Last updated:** [October 15, 2025, 9:19am UTC](https://discuss.pomerium.com/t/contains-operator-for-claim-criterion/487 "2025-10-15T09:19:23Z")
What happened? According to the Pomerium Policy language, the “contains” operator should work with the claims string matcher ingress.pomerium.io/policy: | allow: and: - claim/custom:groups: "\[Devleads, Devel… --- ## [Recurring 302 Redirect due to "session not associated with identity provider"](https://discuss.pomerium.com/t/recurring-302-redirect-due-to-session-not-associated-with-identity-provider/494)
**Author:** [@liveaverage](https://discuss.pomerium.com/u/liveaverage)\ **Replies:** 3\ **Last updated:** [September 9, 2025, 3:04pm UTC](https://discuss.pomerium.com/t/recurring-302-redirect-due-to-session-not-associated-with-identity-provider/494 "2025-09-09T15:04:41Z")
What happened? I have a fairly basic self-hosted authentication configuration (single-node at the moment) using oidc for the provider but after successful authentication I’m receiving another 302 back to the IDP provider… --- ## [Azure AD + Pomerium logout issue — local session clears but Pomerium cookie remains valid](https://discuss.pomerium.com/t/azure-ad-pomerium-logout-issue-local-session-clears-but-pomerium-cookie-remains-valid/493)
**Author:** [@prtkkmrsngh](https://discuss.pomerium.com/u/prtkkmrsngh)\ **Replies:** 1\ **Last updated:** [September 9, 2025, 2:10pm UTC](https://discuss.pomerium.com/t/azure-ad-pomerium-logout-issue-local-session-clears-but-pomerium-cookie-remains-valid/493 "2025-09-09T14:10:53Z")
What happened? We have a web application using Node.js (backend) and React (frontend), and handling authentication via Azure AD and Pomerium (acting as reverse proxy + auth middleware). :locked\_with\_key: Auth Flow Setup… --- ## [400 Bad Request authorization error](https://discuss.pomerium.com/t/400-bad-request-authorization-error/477)
**Author:** [@franklin](https://discuss.pomerium.com/u/franklin)\ **Replies:** 4\ **Last updated:** [July 14, 2025, 6:44pm UTC](https://discuss.pomerium.com/t/400-bad-request-authorization-error/477 "2025-07-14T18:44:45Z")
What happened? I tried to secure an applications with pomerium but am getting a 400 Bad request page after defining my email and password. I have uploaded an image showing the same What did you expect to happen? I wa… --- ## [Pomerium v0.29 on Kubernetes + Letsencrypt HTTP deadlock](https://discuss.pomerium.com/t/pomerium-v0-29-on-kubernetes-letsencrypt-http-deadlock/485)
**Author:** [@mroggia](https://discuss.pomerium.com/u/mroggia)\ **Replies:** 2\ **Last updated:** [July 14, 2025, 6:43pm UTC](https://discuss.pomerium.com/t/pomerium-v0-29-on-kubernetes-letsencrypt-http-deadlock/485 "2025-07-14T18:43:39Z")
What happened? I’m using pomerium ingressclass v0.29 with letsencrypt issuer in kubernetes. I think I am in a loophole and i can’t figure out if it is a bug or missconfiguration. I’m creating an ingress for a service, b… --- ## [Autocert with zerossl not working since upgrade to 0.29](https://discuss.pomerium.com/t/autocert-with-zerossl-not-working-since-upgrade-to-0-29/483)
**Author:** [@ms1111](https://discuss.pomerium.com/u/ms1111)\ **Replies:** 3\ **Last updated:** [June 20, 2025, 4:03am UTC](https://discuss.pomerium.com/t/autocert-with-zerossl-not-working-since-upgrade-to-0-29/483 "2025-06-20T04:03:56Z")
What happened? We upgraded from 0.25.2 to 0.29.2 last month. Since the upgrade, Pomerium hasn’t been able to renew certificates. With this configuration: autocert: true autocert\_ca: https://acme.zerossl.com/v2/DV90 aut… --- ## [Support to MFA and Yubikey](https://discuss.pomerium.com/t/support-to-mfa-and-yubikey/475)
**Author:** [@mha](https://discuss.pomerium.com/u/mha)\ **Replies:** 1\ **Last updated:** [May 27, 2025, 6:09pm UTC](https://discuss.pomerium.com/t/support-to-mfa-and-yubikey/475 "2025-05-27T18:09:44Z")
Does Pomerium support MFA and Yubikey? If so, how do you enable it? --- ## [How to get started](https://discuss.pomerium.com/t/how-to-get-started/469)
**Author:** [@mha](https://discuss.pomerium.com/u/mha)\ **Replies:** 2\ **Last updated:** [May 23, 2025, 1:34pm UTC](https://discuss.pomerium.com/t/how-to-get-started/469 "2025-05-23T13:34:50Z")
I tried to run pomerium integrated with grafana in docker. Unfortunately it doesn’t work and the documentation is not clear. Please help. What’s your environment like? Pomerium version (retrieve with pomerium --versio… --- ## [Using Server-Sent Events with Pomerium Proxy](https://discuss.pomerium.com/t/using-server-sent-events-with-pomerium-proxy/472)
**Author:** [@Jim](https://discuss.pomerium.com/u/Jim)\ **Replies:** 4\ **Last updated:** [May 8, 2025, 8:26am UTC](https://discuss.pomerium.com/t/using-server-sent-events-with-pomerium-proxy/472 "2025-05-08T08:26:50Z")
What happened? I am attempting to migrate from buzzfeed-sso (which is an unmaintained project) to the Pomerium proxy in my Kubernetes clusters. I’ve have it all working except for one problem. I’m using the promerium-p… --- ## [No update since 2024-11 :-(](https://discuss.pomerium.com/t/no-update-since-2024-11/465)
**Author:** [@pomerian](https://discuss.pomerium.com/u/pomerian)\ **Replies:** 4\ **Last updated:** [March 28, 2025, 8:14pm UTC](https://discuss.pomerium.com/t/no-update-since-2024-11/465 "2025-03-28T20:14:40Z")
Hey, I’m excited for the announced UDP support in Pomerium 0.29. You used to release updates very regularly and now no news since Nov '24. Is there an ETA ? --- ## [Pomerium v0.29.0 Release: UDP Support, User Portal, and OpenTelemetry](https://discuss.pomerium.com/t/pomerium-v0-29-0-release-udp-support-user-portal-and-opentelemetry/467)
**Author:** [@bobby](https://discuss.pomerium.com/u/bobby)\ **Replies:** 0\ **Last updated:** [March 27, 2025, 9:41pm UTC](https://discuss.pomerium.com/t/pomerium-v0-29-0-release-udp-support-user-portal-and-opentelemetry/467 "2025-03-27T21:41:25Z")
We’re thrilled to launch Pomerium v0.29.0, packed with features to improve secure access, user experience, and operational insights for your infrastructure. This release introduces: Routes Portal: An intuitive “app da… --- ## [Using groups claim in PPL to use group-based access](https://discuss.pomerium.com/t/using-groups-claim-in-ppl-to-use-group-based-access/189)
**Author:** [@ohitmano](https://discuss.pomerium.com/u/ohitmano)\ **Replies:** 3\ **Last updated:** [March 24, 2025, 7:00pm UTC](https://discuss.pomerium.com/t/using-groups-claim-in-ppl-to-use-group-based-access/189 "2025-03-24T19:00:25Z")
What happened? I’m not able to use “has” matcher with “claim” criteria What did you expect to happen? I was thinking of restricting access to my resources on group membership basis.. After reading documentation it appe… --- ## [503 "cluster unavailable" when using tls\_custom\_ca\_file](https://discuss.pomerium.com/t/503-cluster-unavailable-when-using-tls-custom-ca-file/454)
**Author:** [@julianbadillo](https://discuss.pomerium.com/u/julianbadillo)\ **Replies:** 4\ **Last updated:** [March 5, 2025, 4:01pm UTC](https://discuss.pomerium.com/t/503-cluster-unavailable-when-using-tls-custom-ca-file/454 "2025-03-05T16:01:42Z")
What happened? I have this route set: - from: https://service.publicdomain.com to: https://service.internaldomain.com host\_rewrite: service.publicdomain.com tls\_skip\_verify: true # TODO use CA certificate… --- ## [Identity Manager gets 403 when trying to query the API](https://discuss.pomerium.com/t/identity-manager-gets-403-when-trying-to-query-the-api/452)
**Author:** [@DevOps\_saran](https://discuss.pomerium.com/u/DevOps_saran)\ **Replies:** 5\ **Last updated:** [February 27, 2025, 4:03pm UTC](https://discuss.pomerium.com/t/identity-manager-gets-403-when-trying-to-query-the-api/452 "2025-02-27T16:03:48Z")
We have deployed pomerium in K8s pod with azure IDP integration . Users are able to login and did not find any issues there however in pod logs I can see graph api error What did you expect to happen? No error message f… --- ## [How to skip logging of /ping requests](https://discuss.pomerium.com/t/how-to-skip-logging-of-ping-requests/450)
**Author:** [@rn-erik](https://discuss.pomerium.com/u/rn-erik)\ **Replies:** 1\ **Last updated:** [February 21, 2025, 9:36pm UTC](https://discuss.pomerium.com/t/how-to-skip-logging-of-ping-requests/450 "2025-02-21T21:36:34Z")
What happened? The logs are full of authorize check entries from the upstream load balancer making /ping requests. There are so many of these log entries that they overwhelm the number of non-ping authorize check logs a… --- ## [Homelab questions](https://discuss.pomerium.com/t/homelab-questions/448)
**Author:** [@blue.koala](https://discuss.pomerium.com/u/blue.koala)\ **Replies:** 1\ **Last updated:** [January 31, 2025, 9:13pm UTC](https://discuss.pomerium.com/t/homelab-questions/448 "2025-01-31T21:13:43Z")
I hope to replace WireGuard with Pomerium for my homelab. While I see no obvious blockers, I wanted to ask for input on a few points. Would you think it’s safe to expose Pomerium on 443 in a home setup without addition… --- ## [Quickstart pomerium zero with docker refuses to connect](https://discuss.pomerium.com/t/quickstart-pomerium-zero-with-docker-refuses-to-connect/440)
**Author:** [@vayrynen](https://discuss.pomerium.com/u/vayrynen)\ **Replies:** 1\ **Last updated:** [January 10, 2025, 2:12pm UTC](https://discuss.pomerium.com/t/quickstart-pomerium-zero-with-docker-refuses-to-connect/440 "2025-01-10T14:12:41Z")
Hello, I tried the pomerium zero demo docker setup, but I’m getting ERR\_CONNECTION\_REFUSED for some reason when accessing the verify.\*.pomerium.app page. From local network I’m able to connect to the container when using… --- ## [Device Policy in pomerium](https://discuss.pomerium.com/t/device-policy-in-pomerium/434)
**Author:** [@Sidhant](https://discuss.pomerium.com/u/Sidhant)\ **Replies:** 1\ **Last updated:** [December 3, 2024, 7:56pm UTC](https://discuss.pomerium.com/t/device-policy-in-pomerium/434 "2024-12-03T19:56:27Z")
What did you expect to happen? How do you setup device identification policy for pomerium using docker [Next page](https://discuss.pomerium.com/latest.md?page=1)