krnbr

upstream endpoint	Token Endpoint	Resource Endpoint	Downstream Token Endpoint	Downstream Resource Endpoint
/ping	tls	tls	https://localhost:8453/oauth2/token	https://localhost:8453/mock/ping
/v1/ping	mtls	tls	https://localhost:8443/oauth2/token	https://localhost:8453/mock/ping
/v2/ping	tls	mtls	https://localhost:8453/oauth2/token	https://localhost:8443/mock/ping

krnbr

Would like to share how to configure zitadel behind traefik that already existed.

Traefik's docker-compose.yml - the traefik related folder might be different from the docker-compose.yml of zitadel

# tfk/docker-compose.yml
version: '3'

services:
  traefik:

krnbr

Keybase proof

I hereby claim:

• I am krnbr on github.
• I am karanbir (https://keybase.io/karanbir) on keybase.
• I have a public key ASA3-MAZ4afE4Nfn6DwrrZJ0HLY6uMOvxG5rBb-LKjWLbAo

To claim this, I am signing this object:

krnbr

import {STSClient, AssumeRoleCommand, AssumeRoleCommandOutput} from "@aws-sdk/client-sts";
import axios from "axios";
// Set the AWS Region.
const REGION = "ap-south-1"; // otherwise copy your region from here - https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-available-regions
const stsClient = new STSClient({ region: REGION, credentials: {
    accessKeyId: '<replace with aws access key id>',
    secretAccessKey: '<replace with aws secret access key>'
}});
export { stsClient };

krnbr

sudo apt install chrony -y

sudo systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target

sudo sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/sshd_config

sudo passwd root

sudo systemctl restart ssh

krnbr

    @CircuitBreaker(name = "mockService", fallbackMethod = "fallback")
    public Mono<MockServiceResponse> getMockServiceResponse() {
        return mockServiceWebClient.get()
                .uri(DOWNSTREAM_PATH)
                .retrieve()
                .bodyToMono(MockServiceResponse.class)
                .doOnError(ex -> {
                    throw new RuntimeException("the exception message is - "+ex.getMessage());
                });
    }

krnbr

resilience4j:
    circuitbreaker:
        instances:
            mockService:
                slidingWindowSize: 3
                slidingWindowType: COUNT_BASED
                #waitDurationInOpenState: 5
                waitInterval: 10000
                failureRateThreshold: 50
                permittedNumberOfCallsInHalfOpenState: 5

krnbr

import io.swagger.v3.oas.annotations.Operation;
import io.swagger.v3.oas.annotations.Parameter;
import io.swagger.v3.oas.annotations.enums.ParameterIn;
import io.swagger.v3.oas.annotations.tags.Tag;
import org.springframework.web.bind.annotation.*;
import org.springframework.web.server.ServerWebExchange;
import reactor.core.publisher.Mono;

import javax.validation.Valid;

krnbr

import org.springframework.web.bind.annotation.*;
import org.springframework.web.server.ServerWebExchange;
import reactor.core.publisher.Mono;

import javax.validation.Valid;

/**
 * @author Karanbir Singh on 07/23/2020
 */
@RestController

krnbr

package in.neuw.apis;

import io.swagger.v3.oas.annotations.OpenAPIDefinition;
import io.swagger.v3.oas.annotations.info.Info;
import io.swagger.v3.oas.models.Components;
import io.swagger.v3.oas.models.OpenAPI;
import io.swagger.v3.oas.models.security.SecurityRequirement;
import io.swagger.v3.oas.models.security.SecurityScheme;

@SpringBootApplication