Authorize Service URL
- Environmental Variable:
- Config File Key:
- Kubernetes: not customizable in all in one mode via CRD
- Required; inferred in all-in-one mode to be localhost.
Authorize Service URL is the location of the internally accessible Authorize service. NOTE: Unlike authenticate, authorize has no publicly accessible http handlers so this setting is purely for gRPC communication.
Multiple URLs can be specified with
If your load balancer does not support gRPC pass-through you'll need to set this value to an internally routable location (
https://pomerium-authorize-service.default.svc.cluster.local) instead of an externally routable one (