Path Matching Settings

This reference covers all of Pomerium's Path Matching Settings:

• Path
• Prefix
• Regex

Path

If Path is set, the route will only match incoming requests with a path that is an exact match for the specified path.

How to configure

Core

YAML/JSON setting	Type	Usage
path	string	optional

Examples

routes:
  - from: https://verify.localhost.pomerium.io
    to: http://verify:8000
    path: /admin/some/exact/path

Enterprise

Set Path under Path Matching settings in the Console:

Kubernetes

See Kubernetes Ingress for more information

Prefix

If Prefix is set, the route will only match incoming requests with a path that begins with the specified prefix.

How to configure

Core

YAML/JSON setting	Type	Usage
prefix	string	optional

Examples

from: https://from.example.com
to: https://to.example.com
prefix: /admin

Enterprise

Set the Prefix in Path Matching settings:

Kubernetes

Name	Type	Usage
Prefix	string	optional

spec:
  ingressClassName: pomerium
  rules:
    - host: example.localhost.pomerium.io
      http:
        paths:
          - backend:
              service:
                name: example
                port:
                  name: http
            path: /
            pathType: Prefix

See Kubernetes Ingress for more information

Regex

If Regex is set, the route will only match incoming requests with a path that matches the specified regular expression. The supported syntax is the same as the Go regexp package which is based on re2.

How to configure

Core

YAML/JSON setting	Type	Usage
regex	string	optional

Examples

regex: '^/(admin|superuser)/.*$'

Enterprise

Set Regex in the Console:

Kubernetes

Name	Type	Usage
path_regex	string	optional

Examples

    ingress.pomerium.io/path_regex: 'true'
  name: example
spec:
  ingressClassName: pomerium
  rules:
    - host: example.localhost.pomerium.io
      http:
        paths:
          - backend:
              service:
                name: example
                port:
                  name: http
            path: ^/(admin|superuser)/.*$
            pathType: ImplementationSpecific