gregjbrown

type: Microsoft.App/containerApps
properties:
  managedEnvironmentId: <opa-ca-env>
  configuration:
    activeRevisionsMode: Multiple
    ingress:
      allowInsecure: false
      external: true
      targetPort: 8181
      transport: Auto

gregjbrown

{
  "<dev-instance>.azure-api.net": {
    "environment": "development"
  },
  "<prod-instance>.azure-api.net": {
    "environment": "production"
  }
}

gregjbrown

<policies>
    <inbound>
        <base />
        <set-variable name="requestId" value="@(context.RequestId)" />
        <set-variable name="serviceName" value="@(context.Deployment.ServiceName)" />
        <set-variable name="originalUrl" value="@(context.Request.OriginalUrl.ToString())" />
        <set-variable name="authorization" value="@(context.Request.Headers.GetValueOrDefault("Authorization"))" />
        <set-variable name="uriSegments" value="@(JsonConvert.SerializeObject(new Uri(context.Request.Url.ToString()).Segments))" />
        <choose>
            <when condition="@((bool)context.Request.HasBody)">

gregjbrown

{
  "conferenceapi-dev.azurewebsites.net": {
    "environment": "development"
  },
  "conferenceapi.azurewebsites.net": {
    "environment": "production"
  }
}

gregjbrown

package rules

import future.keywords.if

default allow = false

# allow everything unless denied
allow if not deny

# deny feedback posts without a valid JWT