You can now publish Bicep modules to an Azure Container Registry (ACR), just like Docker images. This solves the “shared module” problem in enterprises. This enables a central platform team to version and distribute approved infrastructure patterns (like secure storage accounts) to app teams.
Read more →Search Results for: name
Azure AD B2C: Custom Policies
User Flows are easy but limited. Custom Policies (Identity Experience Framework) are XML-based beasts that unlock full control. REST API Integration We use a Custom Policy to call a REST API during sign-up to validate a loyalty number. This runs before the user accounts is created in the directory.
Read more →Managing Terraform State in Azure
Terraform state is the “brain” of your infrastructure. If you lose it, you are in trouble. Storing it locally is a no-go for teams. Azure Storage Backend We use Azure Blob Storage to hold the state file. It supports state locking (via Leases) to prevent two developers from applying changes simultaneously. Bootstrap Script The chicken-and-egg […]
Read more →Designing for Nullability in C#
Nullable Reference Types (NRT) are enabled by default in .NET 6 templates. It’s time to stop fighting the warnings and embrace the design philosophy. The Golden Rule “Design your types to be initialized fully on construction.” Most NRT warnings come from models that are partially initialized or set via property injection later. If a property […]
Read more →Azure Container Apps: KEDA and Dapr Managed
Kubernetes is hard. Azure Container Apps (ACA) gives you K8s + KEDA + Dapr without the control plane tax. Scale to Zero ACA can scale your HTTP service to 0 replicas when no requests are coming in. Even better, it uses KEDA scalers. This configuration automatically scales your container based on the depth of an […]
Read more →AKS Network Policy: Locking Down Traffic
By default, K8s is flat. Any pod can talk to any pod. In a multi-tenant cluster, this is a security violation. Deny All Strategy We implement a “Zero Trust” network policy. Then we explicitly allow traffic:
Read more →