Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SSl with Letsencrypt on Kubernetes

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Ashwin Murali Ashwin Murali
April 27, 2019
Technology
39
0

SSl with Letsencrypt on Kubernetes

Talk at RFCs we Love

Avatar for Ashwin Murali

Ashwin Murali

April 27, 2019

More Decks by Ashwin Murali

See All by Ashwin Murali
AWS Community Day UAE 2024 - Sponsorship Deck
Avatar for Ashwin Murali cruisemaniac
0
370
Learn Enough Containers to be Dangerous
Avatar for Ashwin Murali cruisemaniac
0
460
Do More for Less With ECS Fargate!
Avatar for Ashwin Murali cruisemaniac
0
89
Cloud engineer’s journey and survival in the cloud
Avatar for Ashwin Murali cruisemaniac
1
2.1k
What does it take to be a good DevOps Engineer - Tamil / Vadivelu edition 0.1
Avatar for Ashwin Murali cruisemaniac
0
440
AWS VPC 101
Avatar for Ashwin Murali cruisemaniac
0
140
Deploying a Web App on Azure Container Services
Avatar for Ashwin Murali cruisemaniac
0
1.2k
Why DevOps And a few other uncomfortable.. things..
Avatar for Ashwin Murali cruisemaniac
0
130
Connecting 10000 cars to the AWS Cloud
Avatar for Ashwin Murali cruisemaniac
0
1.3k

Other Decks in Technology

See All in Technology
AI駆動開発は個人技からチーム戦へ：組織でAIを使いこなすための実践設計
Avatar for Atsushi Nakatsugawa moongift
PRO
0
320
信頼できるテスティングAIをどう育てるか？
Avatar for odan tomohiro odan611
0
170
どこまでAIに任せるか 〜確率論と決定論の境界決定〜
Avatar for Shu Kobuchi shukob
0
570
データと地図で読む 大井町の「かわるもの、かわらないもの」
Avatar for じゅんじゅん yoshiyama_hana
0
750
Claude Code並行開発環境の ムダ‧ムラ‧ムリを見直した話
Avatar for Muranaka muranakaaa
0
340
Power Automateアップデート情報
Avatar for MiyakeMito miyakemito
0
280
AIQAのナレッジ構築について
Avatar for tonchan qatonchan
1
130
PLaMo 3.0 Primeの事後学習
Avatar for Preferred Networks pfn
PRO
0
200
AI研修(Day1)【MIXI 26新卒技術研修】
Avatar for MIXI ENGINEERS mixi_engineers
PRO
2
2.8k
PLaMoを毎日の開発で使い育てていく
Avatar for Preferred Networks pfn
PRO
0
140
それでも、技術なブログを書く理由 #kichijojipm / Why I Still Write Tech Blogs Even Now
Avatar for ShinkuFencer shinkufencer
0
1.3k
カメラ×AIで挑む「ホワイト物流」― 車両管理、自動化の壁と突破口【SORACOM Discovery 2026】
Avatar for SORACOM（ソラコム） soracom
PRO
0
180

Featured

See All Featured
<Decoding/> the Language of Devs - We Love SEO 2024
Avatar for Nikki Halliwell nikkihalliwell
1
280
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
Avatar for Sam Stephenson sstephenson
162
16k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
55
10k
DevOps and Value Stream Thinking: Enabling flow, efficiency and business value
Avatar for Helen Beal helenjbeal
1
270
Public Speaking Without Barfing On Your Shoes - THAT 2023
Avatar for David Neal reverentgeek
1
470
How To Speak Unicorn (iThemes Webinar)
Avatar for Michelle Schulp Hunt marktimemedia
1
520
Visual Storytelling: How to be a Superhuman Communicator
Avatar for David Neal reverentgeek
2
600
Bootstrapping a Software Product
Avatar for Garrett Dimon garrettdimon
PRO
307
120k
Docker and Python
Avatar for Tania Allard trallard
47
4k
Paper Plane
Avatar for Katie Cordina Lindsey katiecoart
PRO
2
52k
Site-Speed That Sticks
Avatar for Harry Roberts csswizardry
13
1.4k
コードの90%をAIが書く世界で何が待っているのか / What awaits us in a world where 90% of the code is written by AI
Avatar for r-kagaya rkaga
62
45k

Transcript

  1. SSL with Lets Encrypt on K8s Ashwin @ Zoomcar

  2. Agenda • SSLs and LetsEncrypt • K8s and Microservices •

    Cert Manager Demo • Q & A

  3. SSLs and Lets Encrypt

  4. • Privacy • Integrity • Identification

  5. SSL / TLS / HTTPS

  6. • SSLv2 - 1995-ish - Netscape • SSLv3 • TLS

    1.0 - 1999 - IETF - SSLv3.1 • TLS 1.1 - 2006 • TLS 1.2 - 2008 • SSL 3.0 dep - 2015 • TLS 1.3 - 2018

  7. Keys & Handshake

  8. Asymmetric Handshake

  9. Symmetric key Data exchange

  10. Certificates & Authorities

  11. • Issue Certificates • Confirm Identity of Cert Owner •

    Provide Proof of Cert Validity

  12. • Domain Validated • Organization Validated • Extended Validation

  13. K8s and Microservices

  14. • Microservices - Architectural Guidance • Multiple services on colocated

    arch • Does not dictate container use • Containers best suited for use case

  15. Kubernetes

  16. • Code will fail • System resilience and availability •

    Typical functions: Config, Deploy, Scale, Auth, Quota, Lifecycle, Federate, etc

  17. Demo & Questions

  18. Thank You [email protected] +91 9003010231