platformplatform / PlatformPlatform

Alpha state. A platform designed for building enterprise-grade, multi-tenant products using Azure, .NET, React, TypeScript, Infrastructure as Code, etc.
https://platformplatform.github.io
MIT License
258 stars 26 forks source link

Configure HTTPS health probes and secure internal health endpoints #521

Closed mstypsan closed 5 months ago

mstypsan commented 5 months ago

Summary & Motivation

Configure Azure Container Apps HTTPS health probes for the Account Management and Back Office API and Workers for Live and Readiness health checks. AppGateway will continue using TCP health probes.

Initially, Azure Container App uses a QuickStart Image that lacks HTTP health endpoints. Therefore, HTTP health endpoints are configured only after infrastructure deployment when a self-contained system with health endpoints is deployed.

Relocate health endpoints to [self-contained-system]/internal-api/live and [self-contained-system]/internal-api/readiness.

Create a new RequestTransformation in YARP AppGateway to block all traffic to any path containing /internal-api/, ensuring that health endpoints are not publicly accessible but can be only accessed internally by Azure Container Apps.

Checklist