Automate mTLS communication with GoPay partners with Istio Vijay Dhama, Gojek Zufar Dhiyaulhaq, Gojek Agenda ● GoPay & Istio ● Before mutual TLS ● Implementing mutual TLS ○ Centralized Certificate ● Central certificate management manage our certificate lifecycle for HTTPS and mutual TLS communication. ● Renew & sync to our Kubernetes cluster, also support syncing to VM with an agent installed automatically to mutual TLS by sidecar. Challenge & Future Works Challenge ● Client egress communication sometime got 503 error (Istio #26990). This is fixed by adding retry mechanism in the Virtual

together or independently, one node at a time as per your requirements. • Shared platform for heterogeneous workloads The platform can support a broad range of operating environments simultaneously such platforms with a unified underlying infrastructure platform and management. It can also support heterogeneous workloads with varying requirements on a flexible shared infrastructure platform and modernize FQDN or the IP address of the Kubernetes API server or Load Balancer. • Port: Port to use for communication when not using the default port, 443 Note: The use of any port other than 443 or 6443 requires

• Similar requirement • Edge/Cloud nodes management • Application management • Inter-service communication • … • Edge special characters • Edge node running in private network • connect to Cloud behind node’s connect to Cloud through Internet • Low bandwidth/High latency • Unstable connectivity • Heterogeneous hardware • Memory: 64MB ~ 100+ GB • CPU: AMD64/ARM/MIPS… Manage Edge Nodes with KubeEdge • Goal the area and water pressure nearby • Requirement • Management plane in Cloud • Edge to edge communication • Edge autonomous when offline • Lightweight edge node … Case Study#2 --Campus surveillance

kyuubi.authentication .sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection kyuubi.authentication .sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection enterprise data. With a JDBC technology-enabled driver, you can connect all corporate data even in a heterogeneous environment. https://www.oracle.com/java/technologies/javase/javase-tech-database.html Typically

kyuubi.authentication .sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection kyuubi.authentication .sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection enterprise data. With a JDBC technology-enabled driver, you can connect all corporate data even in a heterogeneous environment. https://www.oracle.com/java/technologies/javase/javase-tech-database.html Typically

kyuubi.authentication .sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection kyuubi.authentication .sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection enterprise data. With a JDBC technology-enabled driver, you can connect all corporate data even in a heterogeneous environment. https://www.oracle.com/java/technologies/javase/javase-tech-database.html Typically

kyuubi.authentication .sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection kyuubi.authentication .sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection enterprise data. With a JDBC technology-enabled driver, you can connect all corporate data even in a heterogeneous environment. https://www.oracle.com/java/technologies/javase/javase-tech-database.html Typically

[https://trino.io/], etc, to query massive datasets distributed over fleets of machines from heterogeneous data sources. The Kyuubi Server lane of the below swimlane divides our prospective users into kyuubi.authenticati on.sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection enterprise data. With a JDBC technology-enabled driver, you can connect all corporate data even in a heterogeneous environment. https://www.oracle.com/java/technologies/javase/javase-tech-database.html Typically

[https://trino.io/], etc, to query massive datasets distributed over fleets of machines from heterogeneous data sources. The Kyuubi Server lane of the below swimlane divides our prospective users into kyuubi.authenticati on.sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection enterprise data. With a JDBC technology-enabled driver, you can connect all corporate data even in a heterogeneous environment. https://www.oracle.com/java/technologies/javase/javase-tech-database.html Typically

[https://trino.io/], etc, to query massive datasets distributed over fleets of machines from heterogeneous data sources. The Kyuubi Server lane of the below swimlane divides our prospective users into kyuubi.authenticati on.sasl.qop auth Sasl QOP enable higher levels of protection for Kyuubi communication with clients. auth - authentication only (default) auth-int - authentication plus integrity protection enterprise data. With a JDBC technology-enabled driver, you can connect all corporate data even in a heterogeneous environment. https://www.oracle.com/java/technologies/javase/javase-tech-database.html Typically