Using gRPC with ingress-nginx add-on with AKS — Updated: 2021–08–30 multi-line code to gist as hard to copy from Medium In previous articles in this series, I covered how to publish end points for applications that are deployed on Kubernetes, ultimately detailing how to use Ingress resources with automation support for TLS certificates and updating DNS records. …

Securing Secrets using Vault and AppRole Auth — Security is an essential and a core part of operations and thus keeping secrets secured is vital. Unfortunately, for many an organization, this is often not a priority. The lack of zeal toward managing secrets is likely related toward the complexity involved. Managing configuration artifacts have well established patterns using…

Using tfenv to manage terraform versions — There will come a time when you will need to change to different versions of Terraform. Similar to tools like rbenv for Ruby or pyenv for Python, there's a popular tool used to install different versions of Terraform called tfenv. Most tooling for infrastructure operations runs on Intel processors, called…

Using Consul Connect and Envoy to build a service mesh — This article shows how to set up and get started with CCSM (Consul Connect service mesh) or more recently called just Consul Service Mesh. This article will cover how to install and configure services to use CCSM. …

Integrating an Ingress into NGINX Service Mesh — In the previous article, I demonstrated how to deploy NSM (NGINX Service Mesh) for east-west traffic. This allows clients and servers to communicate transparently with mTLS (mutual TLS), where both the client and servers authenticate each other and provide encrypted traffic, using a mixture of gRPC and HTTPS traffic. I…

Implement NGINX Service Mesh with strict MutualTLS — A service mesh offers automation to secure and control traffic within your Kubernetes infrastructure. With a service mesh, you can get automatic mutual TLS so that traffic is encrypted between services. It does this by injecting a side car container next to the container hosting your service. NGINX is famous…

Using NGINX Ingress Controller on GKE — When I was first starting out in Kubernetes, and I had the need to use a reverse proxy (Layer 7 load balancer), and I came across ingress-nginx, an open source community solution put together with OpenResty platform that uses LuaJIT and NGINX. In case anyone has been living in a…

Using gRPC with ingress-nginx add-on with GKE — This article details how to secure mixed HTTP and gRPC (HTTP/2) web traffic with a single ingress controller. As part of the process, TLS certificates will be issued by a trusted CA. This will use Let’s Encrypt through a popular Kubernetes add-on called cert-manager. About ingress-nginx In a previous article, I demonstrated…

Using cert-manager add-on with GKE — This article details how to secure web traffic using TLS with a certificate issued by a trusted CA. This will use Let’s Encrypt through a popular Kubernetes add-on called cert-manager. This application will cover the following components: Google cloud resources: GKE, Cloud DNS zone Kubernetes add-ons: cert-manager (installed with helmfile)…