Authorize Internal Service URL
Summary
Authorize Internal Service URL is only required for split-service mode deployments where Pomerium can’t access the public Authorize Service URL.
If included, Authorize Internal Service URL will override Authorize Service URL.
How to configure
- Core
- Enterprise
- Kubernetes
| Config file keys | Environment variables | Type | Usage |
|---|---|---|---|
authorize_internal_service_url | AUTHORIZE_INTERNAL_SERVICE_URL | URL | required (Inferred in all-in-one mode to be localhost) |
authorize_internal_service_url is a bootstrap configuration setting and is not configurable in the Console.
Kubernetes does not support authorize_internal_service_url
Examples
# config file key
authorize_internal_service_url: https://pomerium-authorize-service.default.svc.cluster.local
# environment variable
AUTHORIZE_INTERNAL_SERVICE_URL=https://localhost:5443