Kubeflow Operations Guide

Appendix A. Infrastructure Concepts

In this appendix we’ll review some topics about the components used in building the security architecture of many types of distributed systems. The veteran reader may already be familiar with the items discussed here, but most any reader can use the section as a quick review on these key topics in security. This appendix progressively builds on the concepts introduced earlier, so if you are newer to DevOps security, you may not want to skip any sections. The more seasoned DevOps professional might want to jump on down to the Istio or multitenancy sections, however.

Public Key Infrastructure

The function of a public key infrastructure (PKI) is to enable the secure electronic transfer of information for network traffic. These secure transactions enable use cases such as:

• Ecommerce
• Internet banking
• Identity management
• Secure email

PKI is a group of roles, policies, hardware, software, and methods required to together create, distribute, use, store, and manage digital certificates. These techniques also manage public key encryption, which is a foundational component of PKI.

Sometimes we need a more rigorous methodology to confirm the identity of the parties involved in communications. We also may want to validate the information being transferred, and PKI is the foundation to enable these secure electronic transfers of information.

Authentication

Authentication is the method of validating a person or entity’s identity. End-user authentication ...