Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SSl with Letsencrypt on Kubernetes

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Ashwin Murali Ashwin Murali
April 27, 2019
Technology
34
0

SSl with Letsencrypt on Kubernetes

Talk at RFCs we Love

Avatar for Ashwin Murali

Ashwin Murali

April 27, 2019

More Decks by Ashwin Murali

See All by Ashwin Murali
AWS Community Day UAE 2024 - Sponsorship Deck
Avatar for Ashwin Murali cruisemaniac
0
350
Learn Enough Containers to be Dangerous
Avatar for Ashwin Murali cruisemaniac
0
440
Do More for Less With ECS Fargate!
Avatar for Ashwin Murali cruisemaniac
0
81
Cloud engineer’s journey and survival in the cloud
Avatar for Ashwin Murali cruisemaniac
1
2.1k
What does it take to be a good DevOps Engineer - Tamil / Vadivelu edition 0.1
Avatar for Ashwin Murali cruisemaniac
0
430
AWS VPC 101
Avatar for Ashwin Murali cruisemaniac
0
130
Deploying a Web App on Azure Container Services
Avatar for Ashwin Murali cruisemaniac
0
1.2k
Why DevOps And a few other uncomfortable.. things..
Avatar for Ashwin Murali cruisemaniac
0
120
Connecting 10000 cars to the AWS Cloud
Avatar for Ashwin Murali cruisemaniac
0
1.3k

Other Decks in Technology

See All in Technology
20260423_執筆の工夫と裏側 技術書の企画から刊行まで / From the planning to the publication of technical book
Avatar for nash_efp nash_efp
3
600
[最強DB講義]推薦システム | 評価編
Avatar for RecSysLab recsyslab
PRO
0
110
UIライブラリに依存しすぎないReact Native設計を目指して
Avatar for Takahiro Kato grandbig
0
150
MLOps導入のための組織作りの第一歩
Avatar for Daisuke Akagawa (Akasan) akasan
0
390
需要創出(Chatwork)×供給(BPaaS) フライホイールとMoat 実行能力の最適配置とAI戦略
Avatar for kubell kubell_hr
0
970
Expiration of Secure Boot Certificates for vSphere Virtual Machines
Avatar for MasahiroIrie mirie_sd
0
110
Chasing Real-Time Observability for CRuby
Avatar for White-Green whitegreen
0
270
20年前の「OSS革命」に学ぶ AI時代の生存戦略
Avatar for Sam Akada samakada
0
490
音声言語モデル手法に関する発表の紹介
Avatar for Kazuki Inamura kzinmr
0
140
AWS Agent Registry の基礎・概要を理解する/aws-agent-registry-intro
Avatar for Renya Kujirada ren8k
3
410
AIコーディング時代における、ソフトウェアサプライチェーン攻撃に対する防衛術（簡易版）
Avatar for D soysoysoyb
0
150
コードや知識を組み込む / Incorporate Code and Knowledge
Avatar for Kenji Saito ks91
PRO
0
170

Featured

See All Featured
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
55
8.1k
Deep Space Network (abreviated)
Avatar for Tony Rice tonyrice
0
120
Jamie Indigo - Trashchat’s Guide to Black Boxes: Technical SEO Tactics for LLMs
Avatar for Tech SEO Connect techseoconnect
PRO
0
110
The Language of Interfaces
Avatar for Des Traynor destraynor
162
26k
Building AI with AI
Avatar for Ines Montani inesmontani
PRO
1
910
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
32
2.8k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
128
55k
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
75
12k
Neural Spatial Audio Processing for Sound Field Analysis and Control
Avatar for NII S. Koyama's Lab skoyamalab
0
270
The browser strikes back
Avatar for Jono Alderson jonoalderson
0
990
Introduction to Domain-Driven Design and Collaborative software design
Avatar for Kenny Baas-Schwegler baasie
1
740
Tell your own story through comics
Avatar for letsgokoyo letsgokoyo
1
900

Transcript

  1. SSL with Lets Encrypt on K8s Ashwin @ Zoomcar

  2. Agenda • SSLs and LetsEncrypt • K8s and Microservices •

    Cert Manager Demo • Q & A

  3. SSLs and Lets Encrypt

  4. • Privacy • Integrity • Identification

  5. SSL / TLS / HTTPS

  6. • SSLv2 - 1995-ish - Netscape • SSLv3 • TLS

    1.0 - 1999 - IETF - SSLv3.1 • TLS 1.1 - 2006 • TLS 1.2 - 2008 • SSL 3.0 dep - 2015 • TLS 1.3 - 2018

  7. Keys & Handshake

  8. Asymmetric Handshake

  9. Symmetric key Data exchange

  10. Certificates & Authorities

  11. • Issue Certificates • Confirm Identity of Cert Owner •

    Provide Proof of Cert Validity

  12. • Domain Validated • Organization Validated • Extended Validation

  13. K8s and Microservices

  14. • Microservices - Architectural Guidance • Multiple services on colocated

    arch • Does not dictate container use • Containers best suited for use case

  15. Kubernetes

  16. • Code will fail • System resilience and availability •

    Typical functions: Config, Deploy, Scale, Auth, Quota, Lifecycle, Federate, etc

  17. Demo & Questions

  18. Thank You [email protected] +91 9003010231