Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SSl with Letsencrypt on Kubernetes

Avatar for Ashwin Murali Ashwin Murali
April 27, 2019
Technology
39
0

SSl with Letsencrypt on Kubernetes

Talk at RFCs we Love

Avatar for Ashwin Murali

Ashwin Murali

April 27, 2019

More Decks by Ashwin Murali

See All by Ashwin Murali
AWS Community Day UAE 2024 - Sponsorship Deck
Avatar for Ashwin Murali cruisemaniac
0
370
Learn Enough Containers to be Dangerous
Avatar for Ashwin Murali cruisemaniac
0
460
Do More for Less With ECS Fargate!
Avatar for Ashwin Murali cruisemaniac
0
89
Cloud engineer’s journey and survival in the cloud
Avatar for Ashwin Murali cruisemaniac
1
2.1k
What does it take to be a good DevOps Engineer - Tamil / Vadivelu edition 0.1
Avatar for Ashwin Murali cruisemaniac
0
440
AWS VPC 101
Avatar for Ashwin Murali cruisemaniac
0
140
Deploying a Web App on Azure Container Services
Avatar for Ashwin Murali cruisemaniac
0
1.2k
Why DevOps And a few other uncomfortable.. things..
Avatar for Ashwin Murali cruisemaniac
0
130
Connecting 10000 cars to the AWS Cloud
Avatar for Ashwin Murali cruisemaniac
0
1.3k

Other Decks in Technology

See All in Technology
AIは実装を速くする。では、私たちは何を今作るべきか？－立場を越えてリリースに向き合ったチーム開発の実践 / 20260801 Hiromi Nakaya and Naoki Takahashi
Avatar for SHIFT EVOLVE shift_evolve
PRO
2
100
もう一度考える SRE チームの作り方・育て方 / Rethinking SRE #1: Building and Growing SRE Teams
Avatar for rrreeeyyy rrreeeyyy
3
330
AIがコードを書く時代、人間は何を保証するのか———馬場さんと考える、開発者に求められる新しい責任と価値 - TECH PLAY
Avatar for Toshiaki Baba netmarkjp
0
950
コンポーネント名には何を含めるべきなのか？ / what-should-be-included-in-component-names
Avatar for airRnot airrnot1106
0
200
Claude Mythos、Fable...フロンティアAIの最新動向と企業のセキュリティ対策
Avatar for GMO Flatt Security flatt_security
0
180
脱Jenkins、インターン生が挑んだCIツールGitHubActions移行
Avatar for MIXI ENGINEERS mixi_engineers
PRO
1
290
Escolhendo LLMs na Prática: Lições Reais em Busca Agêntica no Mercado Livre —TDC 2026 Floripa
Avatar for Jessica Pauli de C Bonson jpbonson
0
110
MIRU 2026 チュートリアル
Avatar for Keisuke Fujii keisuke198619
0
140
BigQuery を検索ソースとした AI Agent の作り方って 〇〇 通りあんねん
Avatar for SatohJohn satohjohn
0
150
PLaMo 3.0 Primeの構造化出力サポート
Avatar for Preferred Networks pfn
PRO
0
150
PLaMo 3.0 Primeの事後学習
Avatar for Preferred Networks pfn
PRO
0
230
NYC Summit 2026 における Amazon Bedrock AgentCore のアップデート
Avatar for Renya Kujirada ren8k
3
290

Featured

See All Featured
Breaking role norms: Why Content Design is so much more than writing copy - Taylor Woolridge
Avatar for UX Y'all uxyall
0
360
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
31
10k
Keith and Marios Guide to Fast Websites
Avatar for Keith Pitt keithpitt
413
23k
SEO in 2025: How to Prepare for the Future of Search
Avatar for Michael King ipullrank
3
3.7k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
Avatar for Chris Coyier chriscoyier
508
140k
AI Search:
Where Are We & What Can We Do About It?
Avatar for Aleyda Solis aleyda
0
7.7k
Measuring & Analyzing Core Web Vitals
Avatar for Philip Tellis bluesmoon
9
940
コードの90%をAIが書く世界で何が待っているのか / What awaits us in a world where 90% of the code is written by AI
Avatar for r-kagaya rkaga
62
45k
Leading Effective Engineering Teams in the AI Era
Avatar for Addy Osmani addyosmani
9
2.2k
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
55
8.2k
The Impact of AI in SEO - AI Overviews June 2024 Edition
Avatar for Aleyda Solis aleyda
5
1.1k
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
Avatar for Addy Osmani addyosmani
10
1.3k

Transcript

  1. SSL with Lets Encrypt on K8s Ashwin @ Zoomcar

  2. Agenda • SSLs and LetsEncrypt • K8s and Microservices •

    Cert Manager Demo • Q & A

  3. SSLs and Lets Encrypt

  4. • Privacy • Integrity • Identification

  5. SSL / TLS / HTTPS

  6. • SSLv2 - 1995-ish - Netscape • SSLv3 • TLS

    1.0 - 1999 - IETF - SSLv3.1 • TLS 1.1 - 2006 • TLS 1.2 - 2008 • SSL 3.0 dep - 2015 • TLS 1.3 - 2018

  7. Keys & Handshake

  8. Asymmetric Handshake

  9. Symmetric key Data exchange

  10. Certificates & Authorities

  11. • Issue Certificates • Confirm Identity of Cert Owner •

    Provide Proof of Cert Validity

  12. • Domain Validated • Organization Validated • Extended Validation

  13. K8s and Microservices

  14. • Microservices - Architectural Guidance • Multiple services on colocated

    arch • Does not dictate container use • Containers best suited for use case

  15. Kubernetes

  16. • Code will fail • System resilience and availability •

    Typical functions: Config, Deploy, Scale, Auth, Quota, Lifecycle, Federate, etc

  17. Demo & Questions

  18. Thank You [email protected] +91 9003010231