Authorize Internal Service URL

Summary

Authorize Internal Service URL is only required for split-service mode deployments where Pomerium can’t access the public Authorize Service URL.

If included, Authorize Internal Service URL will override Authorize Service URL.

How to configure

Core

Config file keys	Environment variables	Type	Usage
authorize_internal_service_url	AUTHORIZE_INTERNAL_SERVICE_URL	URL	required (Inferred in all-in-one mode to be localhost)

Examples

authorize_internal_service_url: https://pomerium-authorize-service.default.svc.cluster.local

AUTHORIZE_INTERNAL_SERVICE_URL=https://localhost:5443

Enterprise

authorize_internal_service_url is a bootstrap configuration setting and is not configurable in the Console.

Kubernetes

Kubernetes does not support authorize_internal_service_url