OpenFaaS Cloud + Linkerd: A Secure, Multi-Tenant Serverless Platform
Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 15:20· Room 14AB - San Diego Convention Center, Mezzanine Level·
summary
Combines OpenFaaS Cloud with Linkerd to deliver a multi-tenant serverless platform that auto-builds and deploys from Git (demo shows 11 seconds from git push to running), uses BuildKit, pushes images to registries including ECR, and bootstraps the whole stack (cert-manager, sealed-secrets, ingress, metrics) in about 100 seconds. Platform enforces non‑root and read‑only filesystems, namespace network policies, uses NATS for async builds, supports traffic-splitting/canaries via Linkerd and mutual TLS via Linkerd for encrypted service-to-service traffic.
AI-written summary · about
chapters (16)
- 0:00Intro
- 2:15Serverless 1.0 (Cloud Functions/FaaS)
- 4:41Adding a new service (the hard way)
- 6:37OpenFaas: Dockerfile is fair game
- 10:33Linkerd's Dashboard
- 12:33OFC Features
- 13:50Demo - Community Cluster
- 18:03Case-study: DX, Norway
- 18:45Case-study: Good First Issue Bot
- 19:59OpenFaas Cloud - Webhooks
- 21:47OpenFaas Cloud - Dashboard
- 22:37Confidential configuration - Sealed Secrets
- 25:50Encryption end-to-end
- 26:35Linkerd debugging via CLI
- 27:23Linkerd - During auto-scaling
- 30:48Connect & Learn
related talks
23mOpenFaaS: Serverless platform with no strings attached?
19mDiscovering serverless with OpenFaaS
38mServerless with OpenFaaS - Live Example
40mWelcome to Serverless 2.0
31mBuilding a FaaS Platform Using CNCF OSS Projects (Knative, Crossplane, Tekton, ArgoCD)
43mServerless: Avoiding Vendor Lock-In by Building Your Own Platform
39mBuilding Serverless Application Pipelines
34mFaaS and Furious - 0 to Serverless in 60 Seconds, Anywhere