Skip to content

Commit af96a15

Browse files
committed
Update docu 3.3.0
1 parent 5ba3ef6 commit af96a15

File tree

4 files changed

+12
-6
lines changed

4 files changed

+12
-6
lines changed

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,13 +22,13 @@ Please remember to provide a good summary, description as well as steps to repro
2222
To run Gatekeeper, you can build it using this command:
2323

2424
```bash
25-
docker buildx build --platform linux/amd64,linux/arm64 -t quay.io/gogatekeeper/gatekeeper:3.2.1 .
25+
docker buildx build --platform linux/amd64,linux/arm64 -t quay.io/gogatekeeper/gatekeeper:3.3.0 .
2626
```
2727

2828
or you can use aleady existing Docker image by running:
2929

3030
```bash
31-
docker run -it --rm quay.io/gogatekeeper/gatekeeper:3.2.1 \
31+
docker run -it --rm quay.io/gogatekeeper/gatekeeper:3.3.0 \
3232
--listen 127.0.0.1:8080 \
3333
--upstream-url http://127.0.0.1:80 \
3434
--discovery-url https://keycloak.example.com/realms/<REALM_NAME> \

docs/content/_index.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -515,7 +515,7 @@ in Keycloak, providing granular role controls over issue tokens.
515515

516516
``` yaml
517517
- name: gatekeeper
518-
image: quay.io/gogatekeeper/gatekeeper:3.2.1
518+
image: quay.io/gogatekeeper/gatekeeper:3.3.0
519519
args:
520520
- --enable-forwarding=true
521521
- --forwarding-username=projecta
@@ -542,7 +542,7 @@ Example setup client credentials grant:
542542

543543
``` yaml
544544
- name: gatekeeper
545-
image: quay.io/gogatekeeper/gatekeeper:3.2.1
545+
image: quay.io/gogatekeeper/gatekeeper:3.3.0
546546
args:
547547
- --enable-forwarding=true
548548
- --forwarding-domains=projecta.svc.cluster.local
@@ -1025,6 +1025,12 @@ Or on the command line
10251025
--resources "uri=/admin*|roles=admin,superuser|methods=POST,DELETE"
10261026
```
10271027

1028+
From version 3.3.0 there is new option in resources: `white-listed-anon`.
1029+
This option enables to allow anonymous access on resource (means no access token/bearer token present in request)
1030+
and also allows in same time authenticated access on same resource (means for requests containing token it will validate it and request will go through whole authentication/authorization stack).
1031+
This feature might be usefull e.g. in case you have public and private pages, but you would
1032+
like to return private pages list only in case request was authenticated.
1033+
10281034
## PKCE (Proof Key for Code Exchange)
10291035

10301036
Gatekeeper supports PKCE with S256 code challenge method. It stores code verifier in cookie.

e2e/k8s/manifest_test_forwardauth.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2626,7 +2626,7 @@ spec:
26262626
- -c
26272627
- "while true;do sleep 10;done"
26282628
- name: proxy
2629-
image: quay.io/gogatekeeper/gatekeeper:3.2.1
2629+
image: quay.io/gogatekeeper/gatekeeper:3.3.0
26302630
imagePullPolicy: Never
26312631
args:
26322632
- --client-id=test-client

kube/reverse.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ spec:
2121
secretName: tls
2222
containers:
2323
- name: proxy
24-
image: quay.io/gogatekeeper/gatekeeper:3.2.1
24+
image: quay.io/gogatekeeper/gatekeeper:3.3.0
2525
imagePullPolicy: Always
2626
args:
2727
- --client-id=broker

0 commit comments

Comments
 (0)