Ishara Pannila

Ishara Pannila

Sign in Subscribe

Authorization with OPA and Envoy

In my previous post I described how we can use Envoy for Authentication. The purpose of authentication is to verify that someone or something is who they claim to be. This post is about Authorization which determines what they can do once they have access. (Who vs What). In dotnet,

Use Envoy for authentication

With the popularity of the Microservices architecture, handling cross-cutting concerns became a widespread problem. When you start decomposing monolith to microservices and finally end up with dozen of microservices, handling of operational problems such as networking , observability and communication between services will start to become a bottleneck for the growth.

Azure AD B2C App registration

Azure Active Directory B2C provides business-to-customer identity as a service. It allows users to use their preferred social, enterprise, or local account identities to get single sign-on access to your applications and APIs. This post provides some information on creating app registration, set up endpoints , acquire token etc.. First lets

Security headers and TLS protocol version with Envoy/Istio

HTTP security headers are HTTP response headers designed to enhance the security of a site. They instruct browsers on how to behave and prevent them from executing vulnerabilities that would endanger your users. Whilst there are number of HTTP security headers which can be implement to increase the security of

Generate Swagger/OpenAPI file with docker

Good API documentation helps a developer understand the API's capabilities and how it should be used, making integration more efficient. OpenAPI is a specification used for describing REST APIs which enables you to describe your entire API. Swashbuckle is an open-source Swagger implementation used for generating Swagger documentation

Re-route traffic using Istio Service Entry

If you are accessing external services from your application code, you may already have those external urls in some config files or may be added those as ConfigMaps to add further flexibility for modifying them in Kubernetes. However, If you change the config files, environment variables or ConfigMaps most likely

Use Nuget with WiX Project to create Windows Installer package (.msi)

WiX is one of the widely used tool to create a new Windows Installer package (.msi) file. The WiX Visual Studio package provides Visual Studio project templates for you to create a fully functional Windows Installer package easily. However, it expect you to have the WiX Toolset build tools installed

Upload files to Azure Blob Storage from Azure DevOps

There are number of ways to upload files to blob storage. This article will discuss two different options to upload files from Azure DevOps pipelines to blob storage. First option below use Azure Cli(AzureCLI@2) with inline bash script. bash script will do number of task such as get

Getting Started

How to Install Latest libgdiplus library on Docker(dotnetcore)

I recently ran into a issue with Aspose.PDF where it fails when converting PDF to Image. It was giving a System.OutOfMemoryException and in error logs i found that the error comes from the System.Drawing.Common which uses the libgdiplus as the main provider of the cross-platform implementation

How to use KEDA to auto-scale a Azure Function consuming Blobs

Horizontal Pod Autoscaler (HPA), the built-in auto-scaling mechanism that comes with Kubernetes can scale replicas up or down based on the provided CPU and memory-based metrics. However, HPA isn't flexible enough to cover custom scenarios such as using external metrics as a source for scaling decisions. That'