DevOps

Getting traffic into Kubernetes: AWS vs GCP

Why a GKE Ingress can look fine in kubectl and still have no IP — and how that differs from EKS and ALB If you have used EKS, HTTP Ingress usually means an Application Load Balancer. Someone installs the AWS Load Balancer Controller, you set ingressClassName: alb, and AWS creates an ALB. Certificates often come […]

Drupal

Why Drupal Serving HTTP Even After Enabling HTTPS on the Server

Introduction When you switch your Drupal site to HTTPS whether via Apache, NGINX you expect Drupal to recognise it’s running securely. But then you notice something off: Internal links are still rendered as http://. $request->isSecure() returns false. Redirects start looping or downgrading to HTTP. You see Mixed Content warnings. On the browser side, it looks […]

Application SecurityGrails

Spring Security & Grails: Cross domain authentication from HTTP to HTTPS

We were trying to implement SSL-based login and registration (i.e. HTTPS) in an e-commerce web application which was otherwise using the non-secure protocol (i.e. HTTP) for the entire website. Instead of moving the entire web application to SSL, which would have increased response times, we thought it would be best if only the authentication part […]