Scaling ACME CA on openSUSE Kubic
Containerized EJBCA Deployment
Schedule

Presented by:

Arga Dhahana Pramudianto

from National Cyber and Crypto Agency (BSSN) of the Republic of Indonesia

Arga is government employee for National Cyber and Crypto Agency (BSSN), with a very strong operations background and CKA certified. He do a lot of work with Java on Kubernetes, cryptography and Public Key Infrastructure (PKI) core setup. On last 2019, he gave a talk in many Indonesia’s government institutions, Cyber Security Indonesia 2019, openSUSE Asia Summit 2019, and Jakarta Kubernetes Meetups. For my short biography, please kindly visit my LinkedIn Profile

Automated Certificate Management Environment (ACME) Certification Authority (CA) automating interactions between CA and the end entity (web server), allowing the automated Public Key Infrastructure (PKI) deployment on it. It was designed by the Internet Security Research Group (ISRG) for their Let's Encrypt service. Some CA and PKI that offer ACME are Bypass, Let's Encrypt, Entrust, GlobalSign, Venafi, Sectigo (Comodo CA), and PrimeKey Enterprise Java Beans Certificate Authority (EJBCA) Enterprise Edition (EE).

On my talk, i will demonstrate ACME CA running at scale by using containerized EJBCA deployment on openSUSE Kubic Kubernetes cluster. The scaling will be handled by the Horizontal Pod Autosclaer (HPA) to improve the ACME CA ability on serving the end entity PKI deployment request.

Date:
2019 October 6 - 13:45
Duration:
45 min
Room:
Aula Suastika (4th floor)
Conference:
openSUSE.Asia Summit 2019
Language:
Indonesian
Track:
Difficulty:
Medium

Happening at the same time:

  1. openSUSE MicroOS
    2. Start Time:
    2019 October 6 13:00

    Room:
    Ruang 203a (2nd floor)

  2. Reliable Deployments with Kubernetes and Istio
    3. Start Time:
    2019 October 6 13:00

    Room:
    Ruang 203b (2nd floor)

  3. How to Participate Open Source development
    4. Start Time:
    2019 October 6 13:45

    Room:
    Ruang 201 (2nd floor)

  4. Deploy and Use Portus on openSUSE Leap
    5. Start Time:
    2019 October 6 13:45

    Room:
    Ruang 202 (2nd floor)

  5. Minimizing International Internet Traffic Usage from Internet of Things Devices Using Local Server on openSUSE with Blynk Application
    6. Start Time:
    2019 October 6 13:45

    Room:
    Ruang 203c (2nd floor)