Configuring Quarkus URLs Behind A Kubernetes & Istio SSL/TLS Reverse Proxy

In this video, I’m showing how to configure Quarkus to create and return the correct URLs that match what the user provides in their requests. We'll also see how to use a local Minikube Kubernetes cluster with Istio gateways to configure HTTP and HTTPS access, and how to test whether our application URLs are configured correctly.
Code and more information: blog.sebastian...
Quarkus Course: www.sebastian-...

[@matejlaskomulej]

It baffles me how fast you are which your snippets and keyboard shortcuts. Do you perhaps have a video on your environment tools and settings and their usage? I mean like, I've never seen anyone delete more than a single character at the time in the terminal. Plus you type three letter magic, and suddenly a complete command without typos is there for you to edit. And even outside the terminal, in IntelliJ (though I use VSCode), I feel like watching a magician at work :) Upvote! (and on that note, how the hell are there so few of them...)

[@SebastianDaschnerIT]

Thanks a lot for your kind words 🙂 I use a selection of tools, shortcuts, and just practice over the years, but to find out some inspiration you can check out my content on developer productivity: blog.sebastian-daschner.com/tags/productivity and I have a whole video course on that topic that helps you on your journey to become a magician too 🧙‍♂️ www.sebastian-daschner.com/courses/developer-productivity-masterclass

[@DanielWamara]

I might be late on this one but could you show how you could for example use letsencrypt to provide the certificate and this will only be used on the caller service/quarkus application and the connection between the caller and the called will be done using http, both caller and called being in the same namespace.

[@SebastianDaschnerIT]

I think you're refering to mTLS between two pods, which is usually done with sidecar containers, ala Istio? You don't necessarily need letsencrypt for that, if you control all cert creation and usage. My easiest recommendation is to use a service mesh approach like Istio.

[@DanielWamara]

@@SebastianDaschnerIT that could be it yes. Now you got a topic for your next video 😊 I need something like that for a customer’s project and I’m quite clue’s at the moment. I just need the frontend to be reached with https and the services it is calling not. Followed some guides on the net but definitely didn’t worked.

[@nehurane]

Hello Sebastian, that was great tutorial. I want to creat a Quarkus app as a proxy client which authenticates token in incoming requests and then forward main springboot app. Quarkus app will be a sidecar to main app. Can you give me some pointers on this? Thanks.

[@SebastianDaschnerIT]

Thanks. Ok, interesting approach. Yes, I would get started just with the authentication to see that everything works, have a look here: quarkus.io/guides/security-overview-concept For the proxying you probably want to use a JAX-RS Client or other HTTP client for the connection and configure it in the way you need it to be (with timeouts, maybe retries, etc.)

[@nehurane]

@@SebastianDaschnerIT don’t wana build auth server. Want a proxy client implementation in Quarkus which calls Id management jar and when authenticates proceed with request. Anyways I will keep looking for proxy http client.