Securing Windows workloads.pdf
- 1. Securing Windows workloads Thursday, Jun 02, 2022
- 2. Your Speaker Today: β Reza Ramezanpour - Developer Advocate @ Tigera (Project Calico)
- 3. Agenda β Calico overview β A hybrid cluster β Windows workloads β Securing Windows workloads β Demo
- 5. https://projectcalico.org https://slack.projectcalico.org @projectcalico https://github.com/projectcalico/community https://discuss.projectcalico.org 6000+ Slack channel members 150+ Contributors 1,000,000+ Nodes powered by Calico every day
- 9. Β© 2022 Tigera, Inc. Proprietary and Conο¬dential 9 What is a hybrid cluster?
- 10. Β© 2022 Tigera, Inc. Proprietary and Conο¬dential 10 β Linux node (System) β Windows Server 2019 or higher β Kubernetes v1.21 or higher β A CNI Hybrid environment (psst try Calico)
- 12. Β© 2022 Tigera, Inc. Proprietary and Conο¬dential 12 Windows Containers β Run anywhere * β Deploy at scale β Lightweight * β Isolated *
- 13. Β© 2022 Tigera, Inc. Proprietary and Conο¬dential 13 Choose your base image wisely It can be lightweight Windows Server (ltsc2022+) ServerCore NanoServer 7GB+ 4.8GB+ 2.5GB+ 90M+
- 14. Β© 2022 Tigera, Inc. Proprietary and Conο¬dential 14 Kernel Compatibility
- 15. Β© 2022 Tigera, Inc. Proprietary and Conο¬dential 15 Isolation
- 17. Β© 2022 Tigera, Inc. Proprietary and Conο¬dential 17 β Networking β Policy engine Securing workloads K8s Node Networking layer eth0 eth1 Network Foundation CNI
- 20. Stuff used for the demo: https://github.com/frozenprocess/Tigera-Presentations/tr ee/master/2022-06-02.CNCF-securing-windows-workloa ds Do-It-Yourself Resources When things are not working: Github: https://github.com/frozenprocess Twitter: https://twitter.com/fr0zenprocess Linkedin: https://www.linkedin.com/in/rramezanpour/
- 23. Follow us on: Kubernetes.io https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/adding- windows-nodes/ --- Calico for WIndows https://projectcalico.docs.tigera.io/getting-started/windows-calico/ --- AKS Netwokring https://www.youtube.com/watch?v=JyLtg_SJ1lo --- Kubernetes Windows (community) https://github.com/kubernetes-sigs/sig-windows-tools ---- containerd https://github.com/containerd/containerd --- Wincontiner workload https://github.com/frozenprocess/wincontainer Credits
- 24. Follow us on: Thank you!