In IBM API Connect, the Authentication URL user registry provides a simple way to integrate with other user registry, authentication service and so on. It’s basically a URL that accept HTTP Basic authentication request, if the authentication is successful, a HTTP OK status should be return. …

I use magefile as a tool for my Infra as Code (IaC). Actually not only that but a lot of my setup work, configuration work, compile work and so on, are all done with the mage tasks. I had a story on magefile of how I extend it to perform…

Most of the company with an established IT system will have their own Public Key Infrastrcture (PKI) in place. In the OpenShift Container Platform, how we integrate it with the existing PKI? …

As recommened by CIS benchmark, at least one network policy for a namespace is required. This paper examines the subtle YAML syntax of network policy that may cause a totally different effect in the end. Testing Namespaces and Pods Lets create the following namespaces myapp ns1 ns2 ns3 Deploy a Hello World Golang app…

By default out going traffic of the pods are using the hosting node’s IP address to reach to the destination with NAT. Sometimes, the destination might be protected by firewall or the application itself in such a way that only a fixed set of source IPs are allowed to access…

When dealing with monitoring there is always a need for some extra metrics that are beyond what the out of box feature can provide. The same case for Instana. Say I need to track some TLS certificate expirations with Instana. We can bring in custom metrics for Instana by using…

Thanks to the OpenShift Operator and its console, the OpenShift Data Foundation (ODF) installation becomes to just a few mouse click. But sometimes, you may still prefer the traditional command line and YAML file approach, especially you want to automate your cluster setup as the infrastructure as code. Let’s explore…

Volume snapshot is one way to backup, and restore Kafka data, but it's at the storage layer where the process itself doesn’t have any understanding of the application. With Kafka MirrorMaker2 we can perform the backup and restore in a more flexible way. Let’s check this out. Test Environment

I created a sample mTLS application to test the configuration of the reverse proxies (namely HAProxy and Traefik) for routing the traffic based on the SNI hostname. The sample app A toy program that performs the validation of the client’s certificate. func greet(w http.ResponseWriter, r *http.Request) { fmt.Fprintf(w, "App:%s Hello World! %s", os.Getenv("APP_NAME")…