SSl with Letsencrypt on Kubernetes

Talk at RFCs we Love

Transcript

1. SSL with Lets Encrypt on K8s Ashwin @ Zoomcar
2. Agenda • SSLs and LetsEncrypt • K8s and Microservices • Cert Manager Demo • Q & A
3. SSLs and Lets Encrypt
4. • Privacy • Integrity • Identification
5. SSL / TLS / HTTPS
6. • SSLv2 - 1995-ish - Netscape • SSLv3 • TLS 1.0 - 1999 - IETF - SSLv3.1 • TLS 1.1 - 2006 • TLS 1.2 - 2008 • SSL 3.0 dep - 2015 • TLS 1.3 - 2018
7. Keys & Handshake
8. Asymmetric Handshake
9. Symmetric key Data exchange
10. Certificates & Authorities
11. • Issue Certificates • Confirm Identity of Cert Owner • Provide Proof of Cert Validity
12. • Domain Validated • Organization Validated • Extended Validation
13. K8s and Microservices
14. • Microservices - Architectural Guidance • Multiple services on colocated arch • Does not dictate container use • Containers best suited for use case
15. Kubernetes
16. • Code will fail • System resilience and availability • Typical functions: Config, Deploy, Scale, Auth, Quota, Lifecycle, Federate, etc
17. Demo & Questions
18. Thank You ashwin@zoomcar.com +91 9003010231