Pass Identity Headers (per route)
Summary
When set to true, the Pass Identity Headers (per route) setting will pass identity headers to the upstream application.
The default value for this setting is controlled by the global-level Pass Identity Headers setting.
Identity headers include:
X-Pomerium-Jwt-Assertion
X-Pomerium-Claim-*
(see JWT Claim Headers for more information)
How to configure
- Core
- Enterprise
- Kubernetes
YAML/JSON setting | Type | Usage |
---|---|---|
pass_identity_headers | boolean | optional |
Examples
routes:
- from: https://verify.localhost.pomerium.io
to: http://verify:8000
pass_identity_headers: true
Set Pass Identity Headers under General route settings in the Console:
Annotation name | Type | Usage | Default |
---|---|---|---|
pass_identity_headers | boolean | optional | false |
ingress.pomerium.io/pass_identity_headers: 'true'