Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SSl with Letsencrypt on Kubernetes

Avatar for Ashwin Murali Ashwin Murali
April 27, 2019
Technology
0
24

SSl with Letsencrypt on Kubernetes

Talk at RFCs we Love
Avatar for Ashwin Murali

Ashwin Murali

April 27, 2019
Tweet

More Decks by Ashwin Murali

See All by Ashwin Murali
AWS Community Day UAE 2024 - Sponsorship Deck
Avatar for Ashwin Murali cruisemaniac
0
290
Learn Enough Containers to be Dangerous
Avatar for Ashwin Murali cruisemaniac
0
300
Do More for Less With ECS Fargate!
Avatar for Ashwin Murali cruisemaniac
0
66
Cloud engineer’s journey and survival in the cloud
Avatar for Ashwin Murali cruisemaniac
1
2k
What does it take to be a good DevOps Engineer - Tamil / Vadivelu edition 0.1
Avatar for Ashwin Murali cruisemaniac
0
410
AWS VPC 101
Avatar for Ashwin Murali cruisemaniac
0
130
Deploying a Web App on Azure Container Services
Avatar for Ashwin Murali cruisemaniac
0
1k
Why DevOps And a few other uncomfortable.. things..
Avatar for Ashwin Murali cruisemaniac
0
100
Connecting 10000 cars to the AWS Cloud
Avatar for Ashwin Murali cruisemaniac
0
1.2k

Other Decks in Technology

See All in Technology
登壇ネタの見つけ方 / How to find talk topics
Avatar for pinkumohikan pinkumohikan
5
540
25分で解説する「最小権限の原則」を実現するための AWS「ポリシー」大全 / 20250625-aws-summit-aws-policy
Avatar for opelab opelab
9
1.2k
マーケットプレイス版Oracle WebCenter Content For OCI
Avatar for oracle4engineer oracle4engineer
PRO
3
910
Oracle Audit Vault and Database Firewall 20 概要
Avatar for oracle4engineer oracle4engineer
PRO
3
1.7k
Delegating the chores of authenticating users to Keycloak
Avatar for Alexander Schwartz ahus1
0
130
JEDAI Databricks Free Editionもくもく会
Avatar for Takaaki Yayoi taka_aki
1
110
TechLION vol.41～MySQLユーザ会のほうから来ました / techlion41_mysql
Avatar for sakaik sakaik
0
190
CI/CD/IaC 久々に0から環境を作ったらこうなりました
Avatar for Kaz Watanabe kaz29
1
190
あなたの声を届けよう！ 女性エンジニア登壇の意義とアウトプット実践ガイド #wttjp / Call for Your Voice
Avatar for kondoyuko kondoyuko
4
480
米国国防総省のDevSecOpsライフサイクルをAWSのセキュリティサービスとOSSで実現
Avatar for Shun Yoshie syoshie
2
1.2k
MySQL5.6から8.4へ 戦いの記録
Avatar for Koji Yoshida kyoshidaxx
1
270
KubeCon + CloudNativeCon Japan 2025 Recap by CA
Avatar for YuyaKoda ponkio_o
PRO
0
140

Featured

See All Featured
Fireside Chat
Avatar for paigeccino paigeccino
37
3.5k
jQuery: Nuts, Bolts and Bling
Avatar for Doug Neiner dougneiner
63
7.8k
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
231
18k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
53
2.8k
Building an army of robots
Avatar for Kyle Neath kneath
306
45k
Done Done
Avatar for chrislema chrislema
184
16k
Sharpening the Axe: The Primacy of Toolmaking
Avatar for Bryan Cantrill bcantrill
44
2.4k
Unsuck your backbone
Avatar for Amy Palamountain ammeep
671
58k
Easily Structure & Communicate Ideas using Wireframe
Avatar for Afnizar Nur Ghifari afnizarnur
194
16k
Embracing the Ebb and Flow
Avatar for Simon Collison colly
86
4.7k
Building Better People: How to give real-time feedback that sticks.
Avatar for Will Jessup wjessup
367
19k
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
72
4.9k

Transcript

  1. SSL with Lets Encrypt on K8s Ashwin @ Zoomcar

  2. Agenda • SSLs and LetsEncrypt • K8s and Microservices •

    Cert Manager Demo • Q & A

  3. SSLs and Lets Encrypt

  4. • Privacy • Integrity • Identification

  5. SSL / TLS / HTTPS

  6. • SSLv2 - 1995-ish - Netscape • SSLv3 • TLS

    1.0 - 1999 - IETF - SSLv3.1 • TLS 1.1 - 2006 • TLS 1.2 - 2008 • SSL 3.0 dep - 2015 • TLS 1.3 - 2018

  7. Keys & Handshake

  8. Asymmetric Handshake

  9. Symmetric key Data exchange

  10. Certificates & Authorities

  11. • Issue Certificates • Confirm Identity of Cert Owner •

    Provide Proof of Cert Validity

  12. • Domain Validated • Organization Validated • Extended Validation

  13. K8s and Microservices

  14. • Microservices - Architectural Guidance • Multiple services on colocated

    arch • Does not dictate container use • Containers best suited for use case

  15. Kubernetes

  16. • Code will fail • System resilience and availability •

    Typical functions: Config, Deploy, Scale, Auth, Quota, Lifecycle, Federate, etc

  17. Demo & Questions

  18. Thank You [email protected] +91 9003010231