Home avatar

Angel Azuara Eizaguirre

Computer Science Graduate | Cloud & DevOps Enthusiast

Angel's GitHub chart

Design and Implementation of a Cloud-Native Architecture Based on Microservices Deployed on Kubernetes

Introduction

This article covers the implementation of a cloud-native infrastructure deployed on Amazon Web Services (AWS), based on a microservices architecture developed in Go. It also incorporates a CI/CD pipeline that automates the deployment process and ensures high availability, fault tolerance, and service scaling through GitHub workflows and tools such as FluxCD.

Zero Trust on Kubernetes: Securing Microservices With Istio MTLS and Keycloak

Have you ever wondered how to handle user authentication by delegating it to an Identity Provider (IdP), and how to secure communication between your microservices without having to implement that logic yourself? That’s exactly what we’re going to look at in this article.

The motivation for this post comes from the need to address some of the limitations of my bachelor’s thesis. The two main shortcomings were user authentication, which was handled manually by generating a JWT, and the lack of HTTPS in communication between microservices. In this new project we solve both: we delegate authentication to a real IdP, and we secure internal communications with mTLS transparently at the application level.

0%