Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

SSl with Letsencrypt on Kubernetes

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Ashwin Murali Ashwin Murali
April 27, 2019
Technology
41
0

SSl with Letsencrypt on Kubernetes

Talk at RFCs we Love

Avatar for Ashwin Murali

Ashwin Murali

April 27, 2019

More Decks by Ashwin Murali

See All by Ashwin Murali
AWS Community Day UAE 2024 - Sponsorship Deck
Avatar for Ashwin Murali cruisemaniac
0
380
Learn Enough Containers to be Dangerous
Avatar for Ashwin Murali cruisemaniac
0
490
Do More for Less With ECS Fargate!
Avatar for Ashwin Murali cruisemaniac
0
95
Cloud engineer’s journey and survival in the cloud
Avatar for Ashwin Murali cruisemaniac
1
2.1k
What does it take to be a good DevOps Engineer - Tamil / Vadivelu edition 0.1
Avatar for Ashwin Murali cruisemaniac
0
450
AWS VPC 101
Avatar for Ashwin Murali cruisemaniac
0
150
Deploying a Web App on Azure Container Services
Avatar for Ashwin Murali cruisemaniac
0
1.2k
Why DevOps And a few other uncomfortable.. things..
Avatar for Ashwin Murali cruisemaniac
0
130
Connecting 10000 cars to the AWS Cloud
Avatar for Ashwin Murali cruisemaniac
0
1.4k

Other Decks in Technology

See All in Technology
AIエージェントを安全で速い現場監督にする：Jev・Obsidian・メタハーネス
Avatar for Daisuke Masuda x5gtrn
PRO
0
120
AI感のないAWS構成図をAIエージェントに描かせたい！
Avatar for さご sagochiko
1
370
spanner-autoscalerに学ぶ
CRD設計パターン
〜自動化と緊急時対応を両立する
Kubernetesコントローラーの作り方〜
Avatar for tkuchiki tkuchiki
0
130
AI Agent入門〜今更聞けないAgentの話〜
Avatar for Magy hiromimaganuma
0
120
Hermes Agentで、AIが調べて記事を書くブログを作った話
Avatar for ayane blueb
0
110
ADKで始める業務改善 - AIエージェント開発時の考えと設計
Avatar for Kazuki Hara harappa80
2
290
「大丈夫そう？」をObservabilityで確かめる
Avatar for Yusuke Muramatsu mrmtsu
0
160
「どのログを見ればいい？」 から始めた サーバーレス障害解析
Avatar for y_waka1 y_waka1
1
150
AIに賢く動いてもらうためのコンテキスト〜Snowflake女子会 vol.8
Avatar for SnowflakeLadiesGroup snowwmn0824
0
180
ScotSecure West 2026 - Glasgow
Avatar for Ray Bugg raybugg
0
170
[Kiro Meetup #7] Kiro Crew Dive Deep
Avatar for Kyosuke Konishi konippi
0
340
作って終わりじゃないサーバーレス 〜9年運用する大規模EC物流API基盤の設計・運用のリアル〜
Avatar for ZOZO Developers zozotech
PRO
0
530

Featured

See All Featured
Code Review Best Practice
Avatar for Trisha Gee trishagee
74
20k
A Soul's Torment
Avatar for Nat Ma seathinner
8
3.6k
How to Align SEO within the Product Triangle To Get 
Buy-In & Support - #RIMC
Avatar for Aleyda Solis aleyda
2
1.8k
The AI Revolution Will Not Be Monopolized: How open-source beats economies of scale, even for LLMs
Avatar for Ines Montani inesmontani
PRO
3
3.7k
Stewardship and Sustainability of Urban and Community Forests
Avatar for Eric Wiseman pwiseman
0
530
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
123
22k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
Avatar for Morgane Peng morganepeng
133
19k
HU Berlin: Industrial-Strength Natural Language Processing with spaCy and Prodigy
Avatar for Ines Montani inesmontani
PRO
0
720
Making the Leap to Tech Lead
Avatar for Ryan Cromwell cromwellryan
135
10k
Technical Leadership for Architectural Decision Making
Avatar for Kenny Baas-Schwegler baasie
3
580
A Modern Web Designer's Workflow
Avatar for Chris Coyier chriscoyier
699
190k
Side Projects
Avatar for Sacha Greif sachag
456
43k

Transcript

  1. SSL with Lets Encrypt on K8s Ashwin @ Zoomcar

  2. Agenda • SSLs and LetsEncrypt • K8s and Microservices •

    Cert Manager Demo • Q & A

  3. SSLs and Lets Encrypt

  4. • Privacy • Integrity • Identification

  5. SSL / TLS / HTTPS

  6. • SSLv2 - 1995-ish - Netscape • SSLv3 • TLS

    1.0 - 1999 - IETF - SSLv3.1 • TLS 1.1 - 2006 • TLS 1.2 - 2008 • SSL 3.0 dep - 2015 • TLS 1.3 - 2018

  7. Keys & Handshake

  8. Asymmetric Handshake

  9. Symmetric key Data exchange

  10. Certificates & Authorities

  11. • Issue Certificates • Confirm Identity of Cert Owner •

    Provide Proof of Cert Validity

  12. • Domain Validated • Organization Validated • Extended Validation

  13. K8s and Microservices

  14. • Microservices - Architectural Guidance • Multiple services on colocated

    arch • Does not dictate container use • Containers best suited for use case

  15. Kubernetes

  16. • Code will fail • System resilience and availability •

    Typical functions: Config, Deploy, Scale, Auth, Quota, Lifecycle, Federate, etc

  17. Demo & Questions

  18. Thank You [email protected] +91 9003010231