#IstioCon Istio Project Update Lin Sun @linsun_unc #IstioCon Speaker Intro #IstioCon Istio Community Number of contributors last 12 months: 350+ contributing companies 500+ PR authors 1900+

Project Harbor Introduction Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff Engineer, VMware R&D China Nov. 2018 2 Confidential � ©2018 �������� ���:VIC�PKS GitHub Repo: https://github.com/goharbor /harbor/ Apache 2.0 ���� ������������ Project history �������� Harbor���� Harbor���� 5 Harbor���� 6 x x Agenda 7 Confidential � ©2018 Vulnerability Scanning Replication Service Level Agreement (Authorization) SLA: Tenant Mapping (Project) SLA: Flow Control Log Notary Clair Jobs Authentication API Credentials LDAP Platform

Project Harbor Introduction Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff Engineer, VMware R&D China Nov. 2018 2 Confidential � ©2018 �������� ���:VIC�PKS GitHub Repo: https://github.com/goharbor /harbor/ Apache 2.0 ���� ������������ Project history �������� Harbor���� Harbor���� 5 Harbor���� 6 x x Agenda 7 Confidential � ©2018 Vulnerability Scanning Replication Service Level Agreement (Authorization) SLA: Tenant Mapping (Project) SLA: Flow Control Log Notary Clair Jobs Authentication API Credentials LDAP Platform

Management ※※※※※ ※ ※ Metering & Billing ※※※※※ ※ ※ Grayscale Release ※※※※※ ※※※ ※※※ 4 Traffic Governance ※※※※※ ※※※ ※※※ Tracing ※※※※※ ※※※ ※※※ Multicloud Support ※※※※※ ※※※ ※※※※※ Multi-cluster Management multi-dimensional resources in clusters and workspaces Not supported Not supported Microservices Governance Grayscale release Blue-green deployment, grayscale release, traffic mirroring supported; no for implementing grayscale release Traffic governance Built-in microservices traffic topology maps available to support fine-grained traffic governance policies Manually configure and integrate

but are treated as a cohesive whole with a high degree of automation. Integration, metadata and governance capabilities glue the individual components together.” “The reality: Hybrid cloud is the data analytics portability DATA ENG DATA WH AI/ML OP DB DATA FLOW Unified security & governance with open cloud-native storage formats Open data fabrics, lakehouses and data meshes with AND NATIVE INTEGRATION WITH BIG DATA WORKLOADS Support access control policy, lineage and governance Support HDFS and S3 API based applications Application Security Encryption Is the data protected

Members Images Guest: Developer: Administrator: docker pull ... docker pull/push ... Project operation & management Settings 提供以项目为单位的逻辑隔离，存储共享 不同角色具有不同的访问权限，可以与其它用户系统集成 配额管理 制品的高效分发-复制 Fix Bugs Proposal Contributing Guide Community Meetings Governance Model Commits Reviews Presentations Release Plans Host Meetings Governance Model 参与贡献Harbor社区 [2] goharbor.io 04 lists com/goharbor/community/blob/ master/MEETING_SCHEDULE.md 隔周周三晚21：00点 zoom拨入 #harbor #harbor-dev @project_harbor slack.cncf.io demo.goharbor.io • 自助注册账户 演示环境

Arun Kumar R Prepared by Mark Manning Jeff Dileo Divya Natesan Andy Olsen Feedback on this project? https://my.nccgroup.com/feedback/67b627f7-a0a2-43b7-ad68-af515a9ed2e0 Executive Summary Synopsis five weeks along with the help of multiple shadows (provided at no additional cost) worked on the project in tight partnership with Google’s Istio subject matter experts. Scope NCC Group’s evaluation of see https://shattered.io/ Reproduction Steps The following list identifies functions in the Istio project that are using insecure hashing algo- rithms: • istio/istio/mixer/adapter/list/list.go (line 193)

Dashboards & Observability Monitoring & Alerts Security & Authentication Policy Enforcement & Governance RBAC, OPA, Pod & Network Policies CIS Benchmarking Monitoring & Logging Centralized Audit agement Vault Workflow Overview Vault Principles API (HTTP Rest / KMIP) Identity Policy / Governance Audit Dynamic Secrets Static Secrets (Versioned) Crypto as a Service LDAP/AD OIDC JWT Github

bug困难； Lack of governance：各服务可能技术栈不统一，不好统一管理；微服务和SOA究竟有什么区别 SOA MSASOA MSA 尽可能多的共享和复用 share as much as possible 尽量少的共享和复用 share as little as possible 要求统一和标准化 common governance and standards 提倡协作和自由

virtualized, or cloud deployments. The PowerProtect Data Manager platform provides centralized governance that helps mitigate risk and assures compliance of SLAs and SLOs through protection workflows automation. PowerFlex is available in multiple consumption options to help customers meet their project and data center requirements. PowerFlex appliance and PowerFlex rack provide customers the flexibility