Requesting more examples for beginners

[acivitillo]

Is your feature request related to a problem? Please describe.

Not specifically, just requesting more examples.

Describe the solution you'd like

I am trying to get started with Pomerium and it would be really great to have more examples. For instance, I would be interested in an example with JupyterHub

Describe alternatives you've considered

Using other solutions I guess, but there is nothing like Pomerium. Other solutions all look more complex and my use cases are pretty simple

[desimone]

@acivitillo Thanks for making the issue. Adding more examples / recipes is definitely something we'd like to do (and community contributions are very welcome).

Other than JupyterHub could you tell me a bit more about the types of applications you'd like examples for? Is there a particular place you are getting stuck? How are you deploying it?

[acivitillo]

Thanks for taking a look. Just as a background, I run an analytics team and before the pandemic I was starting to teach data analytics with python workshops. So my focus is setting up a cloud analytics environment for analysts and students. We need a working jupyterlab, dask scheduler, flask app, postgres and Superset or Metabase. The user should have sso access to this leveraging GitHub and GitHub teams for authentication and authorization. Security has been a bottleneck. I have some basic questions:

• how to setup the applications to work with Pomerium? Are the apps just authorizing all traffic from Pomerium? So how does say Metabase know the user? Allowed_groups is an amazing concept but I struggle to understand how this plays with the app user roles. Any chance of Pomerium doing a pass through of user info to the app
• is FROM remaining as the browser url or does it change to the TO one
• is GitHub supported as idp (I think so)

I think zero trust is the right approach for this use case as I have had plenty of disappointments with the vpn paradigm (mostly around fine grained app pass through authorization).

As for contributing, I plan to write down my end to end experience setting this up and I can send you a PR once I have all understood and written down.