Journey of an IT Architect
-
Autoscaling on Kubernetes Platform
ReadEdit Post Introduction The concept of autoscaling on Kubernetes platform dates from the era where virtualization first became widespread and the overhead of provisioning a…
-
Istio Operation Gotchas
ReadIn this post I discuss a few aspects when putting istio in operation. Installation Istio installation can be confusing, due to architectural and guideline changes…
-
Service Proxy – from Nginx to Envoy
ReadUpdate (Nov 20, 2022): 1. Envoy’s configuration schema can be hard to get used to. It is lacking examples because the documentation is mostly generated.…
-
Istio External Authorization via OIDC
ReadIstio service mesh allows application developers to offload non-core features to infrastructure layer. We explored authentication and authorization with Istio in a basic lab. In…
-
Istio Lab – Authentication and Authorization
ReadMy previous blog discussed as service mesh what Istio can offer in terms of authentication and authorization capabilities. Istio can authenticate an incoming HTTP request,…
-
Istio Authentication and Authorization
ReadApplications running on Kubernetes platform seeks to offload common non-business features to the platform. Istio helps Kubernetes bridge that gap. It can enforce mTLS communication,…