Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SSl with Letsencrypt on Kubernetes

Avatar for Ashwin Murali Ashwin Murali
April 27, 2019
Technology
41
0

SSl with Letsencrypt on Kubernetes

Talk at RFCs we Love

Avatar for Ashwin Murali

Ashwin Murali

April 27, 2019

More Decks by Ashwin Murali

See All by Ashwin Murali
AWS Community Day UAE 2024 - Sponsorship Deck
Avatar for Ashwin Murali cruisemaniac
0
380
Learn Enough Containers to be Dangerous
Avatar for Ashwin Murali cruisemaniac
0
480
Do More for Less With ECS Fargate!
Avatar for Ashwin Murali cruisemaniac
0
93
Cloud engineer’s journey and survival in the cloud
Avatar for Ashwin Murali cruisemaniac
1
2.1k
What does it take to be a good DevOps Engineer - Tamil / Vadivelu edition 0.1
Avatar for Ashwin Murali cruisemaniac
0
450
AWS VPC 101
Avatar for Ashwin Murali cruisemaniac
0
140
Deploying a Web App on Azure Container Services
Avatar for Ashwin Murali cruisemaniac
0
1.2k
Why DevOps And a few other uncomfortable.. things..
Avatar for Ashwin Murali cruisemaniac
0
130
Connecting 10000 cars to the AWS Cloud
Avatar for Ashwin Murali cruisemaniac
0
1.4k

Other Decks in Technology

See All in Technology
GoにおけるFFIのこれまでとこれから
Avatar for Masaaki Goshima goccy
1
290
Oracle Cloud Infrastructure IaaS 新機能アップデート 2026/6 - 2026/8
Avatar for oracle4engineer oracle4engineer
PRO
0
110
設計の世代交代を乗り越える、14年続くAndroidアプリの開発戦略
Avatar for SansanTech sansantech
PRO
1
150
多摩川(.dev)ランニング入門 / Tamagawa.dev#3
Avatar for FUJIWARA Shunichiro fujiwara3
3
390
Hub & Spoke 環境のネットワークルーティングを分解してみる
Avatar for Tsuyataku tsuyataku
1
530
grill-me（grilling）：AI駆動開発を超助けてくれるSkill / grill me
Avatar for 数理の弾丸 mathbullet
0
110
スクラムで身についていた動き方を、XPで捉え直してみた
Avatar for コドモン開発チーム codmoninc
PRO
1
280
AI時代のAPI品質を支えるガードレール / API Guardrails for API quality in the AI ​​era
Avatar for Yoichi Kawasaki yokawasa
1
150
enechainの内製セルフサービスプラットフォーム
Avatar for Tomoya Usami hiyosi
0
120
データエンジニアリングワークショップ：Auto LoaderとSparkで学ぶデータパイプライン構築
Avatar for Databricks Japan databricksjapan
PRO
0
190
Driving AI Adoption Using In-House GPUs to Serve Qwen
Avatar for po3rin po3rin
2
460
Sigmaユーザーのための有用リソース一挙公開 & Sigmaで使えるMCP #sigma_ucj /useful-resources-for-sigma-computing-users-and-mcps-with-sigma
Avatar for shinyaa31 shinyaa31
0
150

Featured

See All Featured
svc-hook: hooking system calls on ARM64 by binary rewriting
Avatar for Akira Moroo retrage
2
560
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
33
2.1k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
123
22k
SEOcharity - Dark patterns in SEO and UX: How to avoid them and build a more ethical web
Avatar for Sara Fernández Carmona sarafernandez
0
270
Digital Ethics as a Driver of Design Innovation
Avatar for Per Axbom axbom
PRO
1
410
Easily Structure & Communicate Ideas using Wireframe
Avatar for Afnizar Nur Ghifari afnizarnur
194
17k
The Success of Rails: Ensuring Growth for the Next 100 Years
Avatar for Eileen M. Uchitelle eileencodes
47
8.3k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
128
56k
Navigating Weather and Climate Data
Avatar for Ryan Abernathey rabernat
0
510
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
230
23k
Odyssey Design
Avatar for Ryan Kendrick rkendrick25
PRO
2
800
WCS-LA-2024
Avatar for Leonardo Collado-Torres lcolladotor
0
820

Transcript

  1. SSL with Lets Encrypt on K8s Ashwin @ Zoomcar

  2. Agenda • SSLs and LetsEncrypt • K8s and Microservices •

    Cert Manager Demo • Q & A

  3. SSLs and Lets Encrypt

  4. • Privacy • Integrity • Identification

  5. SSL / TLS / HTTPS

  6. • SSLv2 - 1995-ish - Netscape • SSLv3 • TLS

    1.0 - 1999 - IETF - SSLv3.1 • TLS 1.1 - 2006 • TLS 1.2 - 2008 • SSL 3.0 dep - 2015 • TLS 1.3 - 2018

  7. Keys & Handshake

  8. Asymmetric Handshake

  9. Symmetric key Data exchange

  10. Certificates & Authorities

  11. • Issue Certificates • Confirm Identity of Cert Owner •

    Provide Proof of Cert Validity

  12. • Domain Validated • Organization Validated • Extended Validation

  13. K8s and Microservices

  14. • Microservices - Architectural Guidance • Multiple services on colocated

    arch • Does not dictate container use • Containers best suited for use case

  15. Kubernetes

  16. • Code will fail • System resilience and availability •

    Typical functions: Config, Deploy, Scale, Auth, Quota, Lifecycle, Federate, etc

  17. Demo & Questions

  18. Thank You [email protected] +91 9003010231