Name: Secure all your K8s secrets with a KMS provider plugin and Hashicorp Vault
Start: 2022-03-16T16:00:00Z
End: 2022-03-16T16:00:59.000Z
Location: BrightTALK
Rating: 0

Ondat is the Kubernetes-native platform for running stateful applications, anywhere, at scale. Ondat delivers persistent storage directly onto any Kubernetes cluster for running business-critical, stateful applications safely across any public, private and hybrid clouds. For development, DevOps professionals and technology executives, it provides an agnostic platform to run any data service anywhere while ensuring industry-leading levels of application performance, high availability, and security.

High availability is paramount on any production platform, therefore clusters must be designed to sustain failure at different levels. Stateless applications live across failure domains such as availability zones. But what about state, what about data? We will be looking at how to architect Kubernetes clusters and how to use Ondat to keep availability even when an availability zone becomes unavailable. This session will show how to keep data safe across failure domains on a cluster scattered across availability zones. Even though, the session will run on AWS, the topics covered can be extrapolated to other infrastructure providers.

Use Multi-Availability Zone Kubernetes for Disaster Recovery

Secrets are not so secret in Kubernetes! You may be aware that SUSE Rancher can be configured to enable Kubernetes Secrets Encryption. But the encryption mechanism is left for the user to choose. It is critical to pick the right method, as your application's sensitive data will depend on it. As usual, there is no “one size fits all” solution for encrypting Secrets at rest. Join Nic, Principal Developer Advocate at Ondat, in this talk where he will go through various options and use cases. He will start by taking a look at the foundations required to encrypt Secrets and data volumes with SUSE Rancher. Then he will discuss static keys, KMS providers and gRPC encryption proxies. He will finally show how to encrypt databases along with application configuration elements.

SUSE Rancher and Kubernetes Secrets: How to Encrypt Your Data in the Cloud?

Kubernetes has been the platform of choice to develop modern applications over the last few years. In addition, it is very common for enterprises to leverage public cloud providers like AWS, Google Cloud or Microsoft Azure to deploy a managed version of Kubernetes. SUSE Rancher allows you to manage your cluster fleets across all clouds, whether managed or unmanaged, on-premises or in public clouds. With recent Kubernetes innovations and appropriate design around data services, SUSE Rancher can help increase stateful applications resiliency, scale and performance while keeping cloud costs under control. Join Nic, Principal Developer Advocate at Ondat, in this session to learn how to achieve a successful transition to Cloud-Native for your most sensitive applications. He will delve into Kubernetes distributed storage principles and explain how to make the most of public cloud integration with Kubernetes and SUSE Rancher to guarantee availability and performance across multiple geographical areas. Finally, he will give a practical example with Suse Rancher managing EKS and EBS.

Optimizing Cloud Costs for Stateful Applications With SUSE Rancher

As organisations begin to embrace and adopt cloud native practices and migrate their stateless applications to Kubernetes, there will come a stage where running stateful applications reliably in production, whilst not compromising on performance or data security becomes an important requirement.

In this webinar, join us as we walk through provisioning a Microsoft Azure Kubernetes Service (AKS) cluster using Terraform from HashiCorp and automatically deploy Ondat - a Kubernetes native data plane that easily scales as your projects grow.

You will discover 
- How to configure Ondat and deploy a stateful application to demonstrate some of the key use cases that Ondat provides out of the box.
- How to use Kubernetes StorageClass parameters and labels.
- Live demo & Q&A

Deploying Stateful Applications in a Microsoft AKS Cluster Using Ondat

When using Storage optimization for containers on AWS the default storage used is always EBS and EFS. Both EBS and EFS are typically designed for VMs rather than being used for containers. In this webinar, Ferran will demonstrate how to leverage Ondat with EBS to improve availability, cost, and performance.

In this webinar you will discover:
- The architecture behind AWS EBS with Ondat 
- Scalability and performance
- Operational advantages of running Ondat with EBS
- Live demo and Q&A

Storage Optimization for Containers on AWS and How to Leverage Ondat

Introduction to the cloud-native stateful application data and storage concepts, a must-know for any stateful application developer, operator, and architect. In this talk, we will explore the art of developing and running stateful applications in Kubernetes. We will talk about stateful applications requirements and how they can be delivered by Kubernetes and the cloud-native ecosystem. We will also delve into how DevOps tools can help with the development and delivery of these mission-critical applications.

Cloud-Native Data 101 - How to run and plan your stateful applications

Interested in reducing your storage costs while taking advantage of increased performance by running your workloads on Ephemeral Storage AWS EC2 Instances? By using Ondat's capabilities you are giving yourself the opportunity to do just that.


Join this webinar where Angelos where you will discover:

- How you can easily setup using Ondat's new cli plugin!
- How this can be done safely through Ondat's Topology Aware Volume Provisioning feature
- Live Demo and Q&A

Reduce Your Storage Costs on Ephemeral Storage EC2 Instances with Ondat

It is well known that what happens in Kubernetes should stay in Kubernetes. However, Kubernetes Secrets are not secret by default. It is up to the platform administrators to keep them safe by encrypting them and storing the key in a safe place.

Join this workshop to discover how Trousseau, an open-source project providing a generic and standardized connector to Kubernetes KMS providers, and HashiCorp Vault can secure your Secrets and your data with minimum effort. They will even encrypt databases and persistent volumes for more fun! Let’s encrypt all the things!

The lab is available here: https://play.instruqt.com/ondat/tracks/ondat-trousseau-vault, test it yourself!

Unravel the key to your Kubernetes secrets

Join us in this webinar to discuss how Kube-Native CI pipelines and policy-as-code can be leveraged to make sure that your Stateful Applications run on a scalable, performant and resilient data service layer.  On-demand infrastructure services have become a key requirement for developers and devops engineers to provision and consume the resources they need. However, Infrastructure and Cloud admins must implement organizational guard rails to make sure enterprise-ready capabilities are provided. As anything cloud-native, these capabilities must be defined in a declarative way and ideally be wrapped in CI processes. The persistent storage layer is no exception.

The DevOps Dilemma: Navigating Stateful Apps the Kubernetes Way

Join our on demand webinar with IDC and our CEO and founder Alex Chircop to discover; How to evolve your data management strategy to keep up with application strategy

IDC and Ondat Webinar

Don't miss out on watching Ondat at CNDM Day Las Vegas filmed live from AWS@ReInvent

CNDM Day Las Vegas - On Demand

The Mobius Loop provides the supporting methodology, practices, and cultural aspects necessary to develop and deploy at warp speed. This model is the ideal to which organizations aspire—organizations that depend on software must continuously improve the usability and feature set of their software to keep customers happy.

On top of this major paradigm shift, another technology stack is shaking up legacy infrastructure and accelerating cloud adoption: Kubernetes. 

In this session, we will look at the challenges to both DevOps and Kubernetes adoption and how to turn those challenges into opportunities to create a team of DevKubeOps.

What Does It Mean To Be DevKubeOps?

Ferran Castell, Principal Cloud Architect, shows an overview of the Ondat platform, how we are deployed and how the platform works, identifying the unique offering, and the technical differentiators.

Recorded as part of Cloud Field Day 12 on November 4, 2021.

Ondat Tech Deep Dive

Nic Vermandé, Principal Developer Advocate showcases the Developer experience when using Ondat, during multiple stages of SDLC. He will be showing the end-to-end CI/CD workflow, from laptop to public cloud production, without any actions from infrastructure or platform teams.

Recorded as part of Cloud Field Day 12 on November 4, 2021.

Ondat Demo DevOps

Richard Olver, CRO will be talking about why SaaS, the objectives of the strategy and how we're going to get there with example screen-shots.

Recorded as part of Cloud Field Day 12 on November 4, 2021.

The New Ondat SaaS Platform

During this session, Rom Vandepoel, Principal Cloud Architect will discuss the flexibility of the Ondat platform and how it powers a variety of different organizations to become Kubernetes enabled. The use cases highlight real life customers, their pain points and how they were solved by using Ondat in production.

Recorded as part of Cloud Field Day 12 on November 4, 2021.

Ondat Customer Stories

While Hashicorp Vault is a perfect solution to secure all types of secrets consumed by Kubernetes applications, some critical Kubernetes components are not capable of leveraging the power of an external KMS. Leveraging the Kubernetes KMS provider framework with Hashicorp Vault, these components can also secure appropriately using the native Kubernetes API objects reducing friction, knowledge gap, and improving everything DevOps.

Secure all your K8s secrets with a KMS provider plugin and Hashicorp Vault

Kubernetes

Cloud

Data Analytics

Storage

Stateful Applications

Developers

DevOps

Hashicorp

The storage community on BrightTALK is made up of thousands of storage and IT professionals. Find relevant webinars and videos on storage architecture, cloud storage, storage virtualization and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Secure all your K8s secrets with a KMS provider plugin and Hashicorp Vault

Presented by

About this talk

More from this channel