Updates Docker pull URLs

content/docs/capabilities/high-availability.mdx

@@ -178,7 +178,7 @@ networks:
 services:
   pomerium-proxy:
     hostname: pomerium-proxy
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     networks:
       main: {}
     volumes:
@@ -196,7 +196,7 @@ services:
       - CERTIFICATE_AUTHORITY_FILE=/run/secrets/ca.pem
   pomerium-authorize:
     hostname: pomerium-authorize
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     networks:
       main: {}
     volumes:
@@ -208,7 +208,7 @@ services:
       - CERTIFICATE_AUTHORITY_FILE=/run/secrets/ca.pem
   pomerium-authenticate:
     hostname: pomerium-authenticate
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml
     secrets:
@@ -227,7 +227,7 @@ services:
           - authenticate.localhost.pomerium.io
   pomerium-databroker:
     hostname: pomerium-databroker
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     networks:
       main: {}
     volumes:

content/docs/courses/fundamentals/advanced-policies.md

@@ -168,13 +168,13 @@ Docker Compose:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
     environment:

content/docs/courses/fundamentals/advanced-routes.md

@@ -443,13 +443,13 @@ Docker Compose
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
     environment:

content/docs/courses/fundamentals/build-policies.md

@@ -247,13 +247,13 @@ Docker Compose:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
   grafana:

content/docs/courses/fundamentals/build-routes.md

@@ -71,13 +71,13 @@ In your `docker-compose.yaml` file, add Grafana as a service:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
   grafana:
@@ -185,13 +185,13 @@ Docker Compose:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
   grafana:

content/docs/courses/fundamentals/get-started.md

@@ -110,13 +110,13 @@ Add the following configuration settings to `docker-compose.yaml`:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
 ```
@@ -184,13 +184,13 @@ Docker Compose:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
 ```

content/docs/courses/fundamentals/jwt-verification.md

@@ -208,7 +208,7 @@ In your Docker Compose file, add the following environment variable to your Veri
 
 ```yaml title="docker-compose"
 verify:
-  image: pomerium/verify:latest
+  image: cr.pomerium.com/pomerium/verify:latest
   expose:
     - 8000
   environment:
@@ -339,13 +339,13 @@ Docker Compose
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
     environment:

content/docs/courses/fundamentals/tcp-routes.md

@@ -117,7 +117,7 @@ In your Docker Compose file, bind mount your wildcard certificates as a volume i
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       # Mount your wildcard certificates:
       - ./_wildcard.localhost.pomerium.io-key.pem:/pomerium/key.pem:ro

content/docs/deploy/clients/pomerium-cli.mdx

@@ -92,21 +92,21 @@ The CLI utilizes a [minimal](https://github.com/GoogleContainerTools/distroless)
 - `:vX.Y.Z`: which will pull the a [specific tagged release](https://github.com/pomerium/cli/tags).
 
   ```bash {2}
-  docker run pomerium/cli:v0.1.0 --version
+  docker run cr.pomerium.com/pomerium/cli:v0.1.0 --version
   v0.1.0+53bfa4e
   ```
 
 - `:latest`: which will pull the [most recent tagged release](https://github.com/pomerium/cli/releases).
 
   ```bash {2}
-  docker run pomerium/cli:latest --version
+  docker run cr.pomerium.com/pomerium/cli:latest --version
   v0.2.0+87e214b
   ```
 
 - `:main` : which will pull an image in sync with git's [main](https://github.com/pomerium/pomerium/tree/main) branch.
 
   ```bash
-  docker pull pomerium/cli:main
+  docker pull cr.pomerium.com/pomerium/cli:main
   ```
 
 ### Source

content/docs/deploy/core.mdx

@@ -95,19 +95,19 @@ Pomerium also provides [Docker container images](https://www.docker.com/resource
 - `:vX.Y` corresponds to the latest patch release for a specific minor version (starting with v0.25).
 
   ```shell-session
-  $ docker pull pomerium/pomerium:v0.25
+  $ docker pull cr.pomerium.com/pomerium/pomerium:v0.25
   ```
 
 - `:latest` corresponds to the [most recent tagged release](https://github.com/pomerium/pomerium/releases/latest).
 
   ```shell-session
-  $ docker pull pomerium/pomerium:latest
+  $ docker pull cr.pomerium.com/pomerium/pomerium:latest
   ```
 
 - `:main` corresponds to the most recent development build from the [main](https://github.com/pomerium/pomerium/tree/main) git branch.
 
   ```shell-session
-  $ docker pull pomerium/pomerium:main
+  $ docker pull cr.pomerium.com/pomerium/pomerium:main
   ```
 
 Rootless images for official releases are also published to provide additional security. In these images, Pomerium runs as the `nonroot` user. Depending on your deployment environment, you may need to grant the container additional [capabilities](https://linux-audit.com/linux-capabilities-hardening-linux-binaries-by-removing-setuid/) or change the [listen address](/docs/reference/address) to use a port number other than 443.

content/docs/guides/code-server.mdx

@@ -101,7 +101,7 @@ In your `docker-compose.yaml` file, add the code-server and Pomerium services:
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:

content/docs/guides/gitlab.mdx

@@ -212,7 +212,7 @@ Integrations that use unique subdomains will require their own certificates and
     ...
 
       pomerium:
-        image: pomerium/pomerium:latest
+        image: cr.pomerium.com/pomerium/pomerium:latest
         container_name: pomerium
         volumes:
           - ./srv/pomerium/config.yaml:/pomerium/config.yaml:ro

content/docs/guides/jwt-verification.md

@@ -59,7 +59,7 @@ Mac and Linux users can use DNSMasq to map the `*.localhost.pomerium.io` domain
        driver: 'bridge'
    services:
      pomerium:
-       image: pomerium/pomerium:latest
+       image: cr.pomerium.com/pomerium/pomerium:latest
        ports:
          - '443:443'
        volumes:

content/docs/guides/local-oidc.md

@@ -17,7 +17,7 @@ You can use the same configuration examples below for other supported [identity
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     environment:
       # Generate new secret keys. e.g. `head -c32 /dev/urandom | base64`
       - COOKIE_SECRET=<redacted>
@@ -36,7 +36,7 @@ services:
       - identityprovider
 
   verify:
-    image: pomerium/verify
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
 

content/docs/identity-providers/oidc.mdx

@@ -49,13 +49,13 @@ services:
         aliases:
           - keycloak.localhost.pomerium.io
   pomerium:
-    image: pomerium/pomerium:v0.23.0
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     environment:
       JWKS_ENDPOINT: https://pomerium/.well-known/pomerium/jwks.json
 ```

content/examples/docker/autocert.docker-compose.yml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     environment:
       # Generate new secret keys. e.g. `head -c32 /dev/urandom | base64`
       - COOKIE_SECRET=V2JBZk0zWGtsL29UcFUvWjVDWWQ2UHExNXJ0b2VhcDI=
@@ -13,6 +13,6 @@ services:
 
   # https://verify.corp.beyondperimeter.com --> Pomerium --> http://verify
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 80

content/examples/docker/basic.docker-compose.yml.md

@@ -2,15 +2,15 @@
 version: "3"
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       ## Mount your config file: https://www.pomerium.com/docs/reference/
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
       - 443:443
   ## https://verify.localhost.pomerium.io --> Pomerium --> http://verify
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
 ```

content/examples/docker/nginx.docker-compose.yml

@@ -12,7 +12,7 @@ services:
       - /var/run/docker.sock:/tmp/docker.sock:ro
 
   pomerium-authenticate:
-    image: pomerium/pomerium:latest # or `build: .` to build from source
+    image: cr.pomerium.com/pomerium/pomerium:latest # or `build: .` to build from source
     restart: always
     environment:
       - SERVICES=authenticate
@@ -60,7 +60,7 @@ services:
       - 443
 
   pomerium-authorize:
-    image: pomerium/pomerium:latest # or `build: .` to build from source
+    image: cr.pomerium.com/pomerium/pomerium:latest # or `build: .` to build from source
     restart: always
     environment:
       - SERVICES=authorize
@@ -77,7 +77,7 @@ services:
       - 443
 
   pomerium-databroker:
-    image: pomerium/pomerium:latest # or `build: .` to build from source
+    image: cr.pomerium.com/pomerium/pomerium:latest # or `build: .` to build from source
     restart: always
     environment:
       - SERVICES=databroker
@@ -94,7 +94,7 @@ services:
 
   # https://verify.corp.beyondperimeter.com
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 80
   # https://hello.corp.beyondperimeter.com

content/examples/enterprise/hosted-auth-docker.yaml.md

@@ -2,7 +2,7 @@
 version: '3'
 services:
   pomerium:
-    image: pomerium/pomerium:latest
+    image: cr.pomerium.com/pomerium/pomerium:latest
     volumes:
       - ./config.yaml:/pomerium/config.yaml:ro
     ports:
@@ -58,7 +58,7 @@ services:
     volumes:
       - pgdata:/var/lib/postgresql/data
   verify:
-    image: pomerium/verify:latest
+    image: cr.pomerium.com/pomerium/verify:latest
     expose:
       - 8000
     restart: always

content/examples/jenkins/jenkins-docker-compose.md

@@ -4,7 +4,7 @@ networks:
  main: {}
 services:
  pomerium:
-   image: pomerium/pomerium:latest
+   image: cr.pomerium.com/pomerium/pomerium:latest
    volumes:
      - ./config.yaml:/pomerium/config.yaml:ro
    ports:
@@ -16,7 +16,7 @@ services:
  verify:
    networks:
      main: {}
-   image: pomerium/verify:latest
+   image: cr.pomerium.com/pomerium/verify:latest
    expose:
      - 8000
  jenkins: