# \#k8s **URL:** https://discuss.pomerium.com/tag/k8s/5.md [Latest](https://discuss.pomerium.com/latest.md) · [Categories](https://discuss.pomerium.com/categories.md) · [Tags](https://discuss.pomerium.com/tags.md) --- ## [Confused about the best way to install Pomerium Zero on K8s](https://discuss.pomerium.com/t/confused-about-the-best-way-to-install-pomerium-zero-on-k8s/507)
**Author:** [@ab89](https://discuss.pomerium.com/u/ab89)\ **Replies:** 1\ **Last updated:** [April 9, 2026, 11:51pm UTC](https://discuss.pomerium.com/t/confused-about-the-best-way-to-install-pomerium-zero-on-k8s/507 "2026-04-09T23:51:59Z")
What happened? I installed Pomerium Zero using the helm chart. The chart is still on version 0.29 and doesn’t seem supported. Some of the links in the doc seem broken. I would like to use the MCP features. But it is unc… --- ## [WebSocket "Socket Hang Up" / Empty Reply on Ingress Controller v0.32.5 with Internal LB Upstream](https://discuss.pomerium.com/t/websocket-socket-hang-up-empty-reply-on-ingress-controller-v0-32-5-with-internal-lb-upstream/508)
**Author:** [@dwatrous](https://discuss.pomerium.com/u/dwatrous)\ **Replies:** 3\ **Last updated:** [April 9, 2026, 12:47am UTC](https://discuss.pomerium.com/t/websocket-socket-hang-up-empty-reply-on-ingress-controller-v0-32-5-with-internal-lb-upstream/508 "2026-04-09T00:47:12Z")
Environment Pomerium Ingress Controller: v0.32.5 Infrastructure: GKE Private Cluster Upstream: Google Internal Application Load Balancer (L7) via Serverless Network Endpoint Group (PSC) to Cloud Run. Traffic Flow: Brow… --- ## [SSE (eventstream) not working through pomerium](https://discuss.pomerium.com/t/sse-eventstream-not-working-through-pomerium/504)
**Author:** [@dwatrous](https://discuss.pomerium.com/u/dwatrous)\ **Replies:** 1\ **Last updated:** [April 6, 2026, 11:05pm UTC](https://discuss.pomerium.com/t/sse-eventstream-not-working-through-pomerium/504 "2026-04-06T23:05:01Z")
Pomerium Forum Post: Server-Sent Events Not Streaming in Real-Time Through Ingress What happened? Backstage scaffolder task logs do not stream in real-time through Pomerium ingress. When users run a template/scaffolder t… --- ## [ACME HTTP-01 challenge: failed to perform self check (redirect to https)](https://discuss.pomerium.com/t/acme-http-01-challenge-failed-to-perform-self-check-redirect-to-https/501)
**Author:** [@akhayyat](https://discuss.pomerium.com/u/akhayyat)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 2:07am UTC](https://discuss.pomerium.com/t/acme-http-01-challenge-failed-to-perform-self-check-redirect-to-https/501 "2026-02-26T02:07:09Z")
What happened? After installing Pomerium using the k8s yaml manifest, visiting Pomerium’s URL shows the following browser error: Error code: PR\_CONNECT\_RESET\_ERROR pomerium-proxy service log: {"level":"info","ts":"202… --- ## [Testing Pomerium Enterprise locally with FleetDM – is it possible?](https://discuss.pomerium.com/t/testing-pomerium-enterprise-locally-with-fleetdm-is-it-possible/499)
**Author:** [@Monsieurpatate](https://discuss.pomerium.com/u/Monsieurpatate)\ **Replies:** 1\ **Last updated:** [December 1, 2025, 6:45pm UTC](https://discuss.pomerium.com/t/testing-pomerium-enterprise-locally-with-fleetdm-is-it-possible/499 "2025-12-01T18:45:15Z")
What happened? I want to test Pomerium Enterprise locally in a fully isolated lab environment on my PC, without any public IP addresses. My goal is to evaluate FleetDM Device Identity, PPL policies, and the advanced inte… --- ## ["contains" operator for Claim Criterion](https://discuss.pomerium.com/t/contains-operator-for-claim-criterion/487)
**Author:** [@vijay](https://discuss.pomerium.com/u/vijay)\ **Replies:** 2\ **Last updated:** [October 15, 2025, 9:19am UTC](https://discuss.pomerium.com/t/contains-operator-for-claim-criterion/487 "2025-10-15T09:19:23Z")
What happened? According to the Pomerium Policy language, the “contains” operator should work with the claims string matcher ingress.pomerium.io/policy: | allow: and: - claim/custom:groups: "\[Devleads, Devel… --- ## [400 Bad Request authorization error](https://discuss.pomerium.com/t/400-bad-request-authorization-error/477)
**Author:** [@franklin](https://discuss.pomerium.com/u/franklin)\ **Replies:** 4\ **Last updated:** [July 14, 2025, 6:44pm UTC](https://discuss.pomerium.com/t/400-bad-request-authorization-error/477 "2025-07-14T18:44:45Z")
What happened? I tried to secure an applications with pomerium but am getting a 400 Bad request page after defining my email and password. I have uploaded an image showing the same What did you expect to happen? I wa… --- ## [Pomerium v0.29 on Kubernetes + Letsencrypt HTTP deadlock](https://discuss.pomerium.com/t/pomerium-v0-29-on-kubernetes-letsencrypt-http-deadlock/485)
**Author:** [@mroggia](https://discuss.pomerium.com/u/mroggia)\ **Replies:** 2\ **Last updated:** [July 14, 2025, 6:43pm UTC](https://discuss.pomerium.com/t/pomerium-v0-29-on-kubernetes-letsencrypt-http-deadlock/485 "2025-07-14T18:43:39Z")
What happened? I’m using pomerium ingressclass v0.29 with letsencrypt issuer in kubernetes. I think I am in a loophole and i can’t figure out if it is a bug or missconfiguration. I’m creating an ingress for a service, b… --- ## [Adding an external URL to an existing Pomerium Configuration](https://discuss.pomerium.com/t/adding-an-external-url-to-an-existing-pomerium-configuration/402)
**Author:** [@matswillemsen](https://discuss.pomerium.com/u/matswillemsen)\ **Replies:** 1\ **Last updated:** [September 15, 2024, 10:20pm UTC](https://discuss.pomerium.com/t/adding-an-external-url-to-an-existing-pomerium-configuration/402 "2024-09-15T22:20:50Z")
We currently are exposing internal domains through an internal endpoint, with also the Pomerium Authenticate URL set to this internal endpoint (authenticate.xxx.internal.ah.nl) Now, we want to expose this authenticate e… --- ## [Connecting OICD server](https://discuss.pomerium.com/t/connecting-oicd-server/390)
**Author:** [@misha](https://discuss.pomerium.com/u/misha)\ **Replies:** 3\ **Last updated:** [August 12, 2024, 9:26pm UTC](https://discuss.pomerium.com/t/connecting-oicd-server/390 "2024-08-12T21:26:48Z")
What happened? Pomerium v0.25.0 deployed on GKE. On the server side, the setup as described in(https://openid.net/) includes https://example.com/.well-known/openid-configuration endpoint First, I am reaching authorizat… --- ## [Modify the token type towards argo-workflow](https://discuss.pomerium.com/t/modify-the-token-type-towards-argo-workflow/367)
**Author:** [@daniel.caldararu](https://discuss.pomerium.com/u/daniel.caldararu)\ **Replies:** 4\ **Last updated:** [May 16, 2024, 9:29am UTC](https://discuss.pomerium.com/t/modify-the-token-type-towards-argo-workflow/367 "2024-05-16T09:29:01Z")
What happened? I’m trying to use Pomerium in order to redirect the token once I authenticate through my issuer, towards to argo-workflow UI which supports Token authentication and SSO login. Unfortunately doesn’t work be… --- ## [Pomerium OSS + LogTo in k3s (Traefik)](https://discuss.pomerium.com/t/pomerium-oss-logto-in-k3s-traefik/372)
**Author:** [@IngwiePhoenix](https://discuss.pomerium.com/u/IngwiePhoenix)\ **Replies:** 3\ **Last updated:** [May 9, 2024, 6:34pm UTC](https://discuss.pomerium.com/t/pomerium-oss-logto-in-k3s-traefik/372 "2024-05-09T18:34:12Z")
What happened? I have recently installed LogTo into my cluster and configured a few basics. Right now, my k3s cluster is not exposed to the public - I want to figure out authentication and authorization beforehand. The … --- ## [ERR\_TOO\_MANY\_REDIRECTS after authenticating (Pomerium + IDP (Okta, Github or Azure AD)](https://discuss.pomerium.com/t/err-too-many-redirects-after-authenticating-pomerium-idp-okta-github-or-azure-ad/363)
**Author:** [@robmonct](https://discuss.pomerium.com/u/robmonct)\ **Replies:** 2\ **Last updated:** [April 22, 2024, 7:07pm UTC](https://discuss.pomerium.com/t/err-too-many-redirects-after-authenticating-pomerium-idp-okta-github-or-azure-ad/363 "2024-04-22T19:07:29Z")
Dear team, I’m trying to use Pomerium to work as a Identity-Aware Proxy in Azure AKS. I followed the Pomerium Kubernetes Quickstart (Kubernetes Quickstart | Pomerium) and worked fine. After that, I followed the installa… --- ## [Self hosted authenticate service](https://discuss.pomerium.com/t/self-hosted-authenticate-service/357)
**Author:** [@pepov](https://discuss.pomerium.com/u/pepov)\ **Replies:** 6\ **Last updated:** [April 10, 2024, 3:43pm UTC](https://discuss.pomerium.com/t/self-hosted-authenticate-service/357 "2024-04-10T15:43:52Z")
What happened? We used the hosted authenticate service with success but later decided to host our own to have uptime guarantee. We currently use version v0.22.1. We now get a 401 locally by our pomerium proxy after a f… --- ## [Usage of AWS Cert Manager](https://discuss.pomerium.com/t/usage-of-aws-cert-manager/337)
**Author:** [@arun.sisodiya](https://discuss.pomerium.com/u/arun.sisodiya)\ **Replies:** 1\ **Last updated:** [February 22, 2024, 3:20pm UTC](https://discuss.pomerium.com/t/usage-of-aws-cert-manager/337 "2024-02-22T15:20:35Z")
Usage of AWS Cert Manager instead of cert-manager With the new versions of Pomerium, I have identified that Pomerium is supporting cert-manager for the certificates of Ingress but I want to use the AWS Cert manager for t… --- ## [Enabling whitelisting to the Public facing Ingress](https://discuss.pomerium.com/t/enabling-whitelisting-to-the-public-facing-ingress/335)
**Author:** [@arun.sisodiya](https://discuss.pomerium.com/u/arun.sisodiya)\ **Replies:** 2\ **Last updated:** [February 15, 2024, 9:23am UTC](https://discuss.pomerium.com/t/enabling-whitelisting-to-the-public-facing-ingress/335 "2024-02-15T09:23:52Z")
Unable to configure IP whitelisting on Ingress level I want to access the public-facing ingress using Pomerium as an ingress class with IP whitelisting. Currently, It is possible with the Ingress-nginx controller using … --- ## [404 response for all routes after upgrade - probable config error](https://discuss.pomerium.com/t/404-response-for-all-routes-after-upgrade-probable-config-error/147)
**Author:** [@sazzle](https://discuss.pomerium.com/u/sazzle)\ **Replies:** 3\ **Last updated:** [August 9, 2023, 8:14pm UTC](https://discuss.pomerium.com/t/404-response-for-all-routes-after-upgrade-probable-config-error/147 "2023-08-09T20:14:18Z")
What happened? We have 4 kubernetes cluster using pomerium installed with helm. They were on version 0.15.7 and working absolutely fine. A couple of days ago I upgraded them to v0.18.0 but when I try to access any of the… --- ## [Massive RAM usage while using K8s CRD](https://discuss.pomerium.com/t/massive-ram-usage-while-using-k8s-crd/229)
**Author:** [@raicio](https://discuss.pomerium.com/u/raicio)\ **Replies:** 6\ **Last updated:** [January 20, 2023, 4:11pm UTC](https://discuss.pomerium.com/t/massive-ram-usage-while-using-k8s-crd/229 "2023-01-20T16:11:28Z")
Hi everyone! What happened? We have switched to pomerium all-in-one with kubernetes CRD for both HTTPS and TCP rules. Since then, RAM usage has skyrocketed and pods take a long time to come online. Persistence is conf… --- ## [Pomerium sync error: no healthy upstream](https://discuss.pomerium.com/t/pomerium-sync-error-no-healthy-upstream/223)
**Author:** [@Wijxex](https://discuss.pomerium.com/u/Wijxex)\ **Replies:** 3\ **Last updated:** [January 12, 2023, 4:54pm UTC](https://discuss.pomerium.com/t/pomerium-sync-error-no-healthy-upstream/223 "2023-01-12T16:54:11Z")
What happened? I am upgrading Pomerium from pomerium/pomerium:v0.5.0 → pomerium/pomerium:main so I configured the authenticate/authorize/databroker/proxy services and deployments + ingress + config as configured here : p… --- ## [Pomerium large version upgrade](https://discuss.pomerium.com/t/pomerium-large-version-upgrade/181)
**Author:** [@Wijxex](https://discuss.pomerium.com/u/Wijxex)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 4:24am UTC](https://discuss.pomerium.com/t/pomerium-large-version-upgrade/181 "2022-12-21T04:24:42Z")
What happened? Hi, I will migrate my Kubernetes cluster to v1.22 and to do so I need to fix the deprecated APIs one of them is networking.k8s.io/v1beta1 . I was reading the documentation and I came accross this changelo… --- ## [Kubernetes - Ingress - Multiple IDP?](https://discuss.pomerium.com/t/kubernetes-ingress-multiple-idp/155)
**Author:** [@darwiner](https://discuss.pomerium.com/u/darwiner)\ **Replies:** 3\ **Last updated:** [September 23, 2022, 1:33pm UTC](https://discuss.pomerium.com/t/kubernetes-ingress-multiple-idp/155 "2022-09-23T13:33:16Z")
What happened? Hey there, I’ve gone through the Kubernetes Quickstart document and have been able to successfully setup Pomerium with an integration in place with Okta. Everything seems to be working as I would expect … --- ## [Operator Upgrade to Ingress Controller Error](https://discuss.pomerium.com/t/operator-upgrade-to-ingress-controller-error/158)
**Author:** [@jawabuu](https://discuss.pomerium.com/u/jawabuu)\ **Replies:** 1\ **Last updated:** [September 20, 2022, 11:58am UTC](https://discuss.pomerium.com/t/operator-upgrade-to-ingress-controller-error/158 "2022-09-20T11:58:24Z")
What happened? I upgraded from operator to ingress-controller using chart version: 28.0.2 What did you expect to happen? Define ingresscontroller as per your guide ingressController: enabled: true image… --- ## [Kubernetes | Ingress Controller | v0.18.0 | Ingress controller is processing non-pomerium ingresses](https://discuss.pomerium.com/t/kubernetes-ingress-controller-v0-18-0-ingress-controller-is-processing-non-pomerium-ingresses/148)
**Author:** [@ulfox](https://discuss.pomerium.com/u/ulfox)\ **Replies:** 4\ **Last updated:** [August 31, 2022, 9:30pm UTC](https://discuss.pomerium.com/t/kubernetes-ingress-controller-v0-18-0-ingress-controller-is-processing-non-pomerium-ingresses/148 "2022-08-31T21:30:29Z")
What happened? Hi team, In the ingress documentation, there is this warning block Only one Ingress Controller instance is supported per Pomerium cluster. Does this mean, 1 Pomerium ingress controller or 1 ingress cont… --- ## [Pomerium-databroker pod CrashLoopBackOff](https://discuss.pomerium.com/t/pomerium-databroker-pod-crashloopbackoff/126)
**Author:** [@SeanYuan](https://discuss.pomerium.com/u/SeanYuan)\ **Replies:** 2\ **Last updated:** [June 2, 2022, 6:45am UTC](https://discuss.pomerium.com/t/pomerium-databroker-pod-crashloopbackoff/126 "2022-06-02T06:45:02Z")
Hi Expert: sorry to bother, What happened? after helm installation, the pomerium-databroker pod and redis pod cannot be running What did you expect to happen? How’d it happen? the pods status is shown below databro… --- ## [TCP proxy route\_not\_found](https://discuss.pomerium.com/t/tcp-proxy-route-not-found/113)
**Author:** [@andrejs.golevs](https://discuss.pomerium.com/u/andrejs.golevs)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 9:12pm UTC](https://discuss.pomerium.com/t/tcp-proxy-route-not-found/113 "2022-05-06T21:12:48Z")
What happened? ./pomerium-cli tcp test.dev.redacted.com:4444 --disable-tls-verification --pomerium-url https://forwardauth.dev.redacted.com:5555 --listen :3333 2022/05/06 14:04:30 listening on \[::\]:3333 2022/05/06 14:04:… --- ## [Pomerium Config with Kubernetes secrets and Gitops (Flux)](https://discuss.pomerium.com/t/pomerium-config-with-kubernetes-secrets-and-gitops-flux/96)
**Author:** [@RayaneB](https://discuss.pomerium.com/u/RayaneB)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 9:09pm UTC](https://discuss.pomerium.com/t/pomerium-config-with-kubernetes-secrets-and-gitops-flux/96 "2022-03-28T21:09:46Z")
What happened? Hi Guys, I’m using pomerium and I’ve installed it with our Gitops engine (flux). I’ve also forked the helm chart to replace the secret by a configmap (I did not know about some sensitive data like set\_req… --- ## [External Domain configuration](https://discuss.pomerium.com/t/external-domain-configuration/92)
**Author:** [@saranicole](https://discuss.pomerium.com/u/saranicole)\ **Replies:** 18\ **Last updated:** [March 25, 2022, 7:44pm UTC](https://discuss.pomerium.com/t/external-domain-configuration/92 "2022-03-25T19:44:08Z")
I am trying to use Pomerium to provide AuthN to internal facing apps starting with Prometheus. I will also be integrating it with Argo CD so some potential for upgrading to the SAML use case. What happened? Unable to g… --- ## [Pomerium Auth0/GitHub IdP Grafana JWT does not work](https://discuss.pomerium.com/t/pomerium-auth0-github-idp-grafana-jwt-does-not-work/56)
**Author:** [@ram](https://discuss.pomerium.com/u/ram)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 8:02pm UTC](https://discuss.pomerium.com/t/pomerium-auth0-github-idp-grafana-jwt-does-not-work/56 "2022-01-05T20:02:46Z")
Running the latest version of Pomerium and Grafana (Community stack), Auth0 or GitHub are tested IdP. Grafana is setup to use JWT. What happened? Post authentication on the IdP portal, redirection to grafana is not work… --- ## [Upstream connect error with Pomerium Ingress Controller](https://discuss.pomerium.com/t/upstream-connect-error-with-pomerium-ingress-controller/43)
**Author:** [@rguichard](https://discuss.pomerium.com/u/rguichard)\ **Replies:** 2\ **Last updated:** [December 21, 2021, 8:22pm UTC](https://discuss.pomerium.com/t/upstream-connect-error-with-pomerium-ingress-controller/43 "2021-12-21T20:22:37Z")
Hi everyone, I’m having trouble migrating from Helm chart 24.0 to 25.0 with the new Ingress Controller. After being authenticated with my IdP and after ~5sec of loading, I get upstream connect error or disconnect/reset … --- ## [Kubernetes Deployment Across Clusters with mTLS](https://discuss.pomerium.com/t/kubernetes-deployment-across-clusters-with-mtls/39)
**Author:** [@alex](https://discuss.pomerium.com/u/alex)\ **Replies:** 2\ **Last updated:** [December 6, 2021, 4:12pm UTC](https://discuss.pomerium.com/t/kubernetes-deployment-across-clusters-with-mtls/39 "2021-12-06T16:12:22Z")
[Next page](https://discuss.pomerium.com/tag/k8s/5.md?match_all_tags=true&page=1&tags%5B%5D=k8s)