Upgrade to Pro — share decks privately, control downloads, hide ads and more …

SSl with Letsencrypt on Kubernetes

Avatar for Ashwin Murali Ashwin Murali
April 27, 2019
Technology
0
24

SSl with Letsencrypt on Kubernetes

Talk at RFCs we Love

Avatar for Ashwin Murali

Ashwin Murali

April 27, 2019
Tweet

More Decks by Ashwin Murali

See All by Ashwin Murali
AWS Community Day UAE 2024 - Sponsorship Deck
Avatar for Ashwin Murali cruisemaniac
0
310
Learn Enough Containers to be Dangerous
Avatar for Ashwin Murali cruisemaniac
0
350
Do More for Less With ECS Fargate!
Avatar for Ashwin Murali cruisemaniac
0
69
Cloud engineer’s journey and survival in the cloud
Avatar for Ashwin Murali cruisemaniac
1
2.1k
What does it take to be a good DevOps Engineer - Tamil / Vadivelu edition 0.1
Avatar for Ashwin Murali cruisemaniac
0
420
AWS VPC 101
Avatar for Ashwin Murali cruisemaniac
0
130
Deploying a Web App on Azure Container Services
Avatar for Ashwin Murali cruisemaniac
0
1.1k
Why DevOps And a few other uncomfortable.. things..
Avatar for Ashwin Murali cruisemaniac
0
110
Connecting 10000 cars to the AWS Cloud
Avatar for Ashwin Murali cruisemaniac
0
1.2k

Other Decks in Technology

See All in Technology
Oracle Base Database Service 技術詳細
Avatar for oracle4engineer oracle4engineer
PRO
12
80k
そのWAFのブロック、どう活かす？ サービスを守るための実践的多層防御と思考法 / WAF blocks defense decision
Avatar for 株式会社カミナシ kaminashi
0
200
ビズリーチ求職者検索におけるPLMとLLMの活用 / Search Engineering MEET UP_2-1
Avatar for Visional Engineering ＆ Design visional_engineering_and_design
1
150
防災デジタル分野での官民共創の取り組み (2)DIT/CCとD-CERTについて
Avatar for Masakatsu Sugii ditccsugii
0
310
なぜAWSを活かしきれないのか？技術と組織への処方箋
Avatar for NRI Netcom nrinetcom
PRO
5
970
ニッポンの人に知ってもらいたいGISスポット
Avatar for sakaik sakaik
0
160
プレーリーカードを活用しよう❗❗デジタル名刺交換からはじまるイベント会場交流のススメ
Avatar for Masataka Tsukamoto tsukaman
0
180
OAuthからOIDCへ ― 認可の仕組みが認証に拡張されるまで
Avatar for 山根大生 yamatai1212
0
130
初めてのDatabricks Apps開発
Avatar for Takaaki Yayoi taka_aki
1
120
Introduction to Sansan Meishi Maker Development Engineer
Avatar for Sansan, Inc. sansan33
PRO
0
310
Findy Team+ QAチーム これからのチャレンジ！
Avatar for ファインディ株式会社（イベント資料アップ用） findy_eventslides
0
430
このままAIが発展するだけでAGI達成可能な理由
Avatar for Frieve-A frievea
0
120

Featured

See All Featured
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
127
53k
Building Adaptive Systems
Avatar for Chris Keathley keathley
44
2.8k
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
30
2.9k
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
Avatar for Eileen M. Uchitelle eileencodes
26
3.1k
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
52
3.4k
Navigating Team Friction
Avatar for Lara Hogan lara
190
15k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
Avatar for Chris Coyier chriscoyier
508
140k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
35
6.1k
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
45
7.7k
Product Roadmaps are Hard
Avatar for C. Todd Lombardo iamctodd
PRO
54
11k
4 Signs Your Business is Dying
Avatar for Josh Pigford shpigford
185
22k
Fireside Chat
Avatar for paigeccino paigeccino
40
3.7k

Transcript

  1. SSL with Lets Encrypt on K8s Ashwin @ Zoomcar

  2. Agenda • SSLs and LetsEncrypt • K8s and Microservices •

    Cert Manager Demo • Q & A

  3. SSLs and Lets Encrypt

  4. • Privacy • Integrity • Identification

  5. SSL / TLS / HTTPS

  6. • SSLv2 - 1995-ish - Netscape • SSLv3 • TLS

    1.0 - 1999 - IETF - SSLv3.1 • TLS 1.1 - 2006 • TLS 1.2 - 2008 • SSL 3.0 dep - 2015 • TLS 1.3 - 2018

  7. Keys & Handshake

  8. Asymmetric Handshake

  9. Symmetric key Data exchange

  10. Certificates & Authorities

  11. • Issue Certificates • Confirm Identity of Cert Owner •

    Provide Proof of Cert Validity

  12. • Domain Validated • Organization Validated • Extended Validation

  13. K8s and Microservices

  14. • Microservices - Architectural Guidance • Multiple services on colocated

    arch • Does not dictate container use • Containers best suited for use case

  15. Kubernetes

  16. • Code will fail • System resilience and availability •

    Typical functions: Config, Deploy, Scale, Auth, Quota, Lifecycle, Federate, etc

  17. Demo & Questions

  18. Thank You [email protected] +91 9003010231