Slide 1

Slide 1 text

SSL with Lets Encrypt on K8s Ashwin @ Zoomcar

Slide 2

Slide 2 text

Agenda ● SSLs and LetsEncrypt ● K8s and Microservices ● Cert Manager Demo ● Q & A

Slide 3

Slide 3 text

SSLs and Lets Encrypt

Slide 4

Slide 4 text

● Privacy ● Integrity ● Identification

Slide 5

Slide 5 text

SSL / TLS / HTTPS

Slide 6

Slide 6 text

● SSLv2 - 1995-ish - Netscape ● SSLv3 ● TLS 1.0 - 1999 - IETF - SSLv3.1 ● TLS 1.1 - 2006 ● TLS 1.2 - 2008 ● SSL 3.0 dep - 2015 ● TLS 1.3 - 2018

Slide 7

Slide 7 text

Keys & Handshake

Slide 8

Slide 8 text

Asymmetric Handshake

Slide 9

Slide 9 text

Symmetric key Data exchange

Slide 10

Slide 10 text

Certificates & Authorities

Slide 11

Slide 11 text

● Issue Certificates ● Confirm Identity of Cert Owner ● Provide Proof of Cert Validity

Slide 12

Slide 12 text

● Domain Validated ● Organization Validated ● Extended Validation

Slide 13

Slide 13 text

K8s and Microservices

Slide 14

Slide 14 text

● Microservices - Architectural Guidance ● Multiple services on colocated arch ● Does not dictate container use ● Containers best suited for use case

Slide 15

Slide 15 text

Kubernetes

Slide 16

Slide 16 text

● Code will fail ● System resilience and availability ● Typical functions: Config, Deploy, Scale, Auth, Quota, Lifecycle, Federate, etc

Slide 17

Slide 17 text

Demo & Questions

Slide 18

Slide 18 text

Thank You [email protected] +91 9003010231