TLS

As explained in Kubernetes for Developers

TLS is a cryptographic protocol that encrypts network communication and can authenticate endpoints using certificates.

TLS encrypts HTTPS connections and can verify endpoint identity through certificates. In Kubernetes, an Ingress can terminate TLS at the load balancer, then forward requests to backend Services over HTTP or HTTPS. section 7.2.1

Choose the traffic path according to the security and operational requirement:

• Terminate TLS at the Ingress and use HTTP to the backend over the provider’s secure network; this can reduce application-server overhead. section 7.2.1
• Terminate and re-encrypt at the Ingress when backend connections should also use HTTPS. section 7.2.1
• Use a LoadBalancer Service when encrypted client traffic must pass through unchanged to the backend. section 7.2.1

Configure TLS for an Ingress

Create or obtain a private key and certificate, store them in a Kubernetes Secret, and reference that Secret from the Ingress TLS configuration. A self-signed certificate encrypts traffic but does not verify identity, so browsers warn about it.

Figure 7.5 The Ingress terminates HTTPS (TLS) traffic and can forward it to the serving Pods over plain HTTP or HTTPS connections.

Visualizes TLS termination at the Ingress and forwarding to Pods over HTTP or HTTPS. section 7.2.1

How Kubernetes for Developers covers it

How deep it goes

Explains termination, re-encryption, certificates, Secrets, and traffic passthrough, but does not detail certificate-authority procedures.

Examples

Uses OpenSSL commands, a kubectl TLS Secret, an Ingress manifest, and browser access to an HTTPS endpoint.

What it assumes

Assumes an Ingress, backend Services, a private key, and a certificate are available or can be created.

What you can do after

Operate/configure TLS with OpenSSL, kubectl, Kubernetes Secrets, and Ingress manifests.

How it connects

Connects TLS with HTTPS, Ingress, Kubernetes Secrets, Services, load balancers, certificates, and HTTP.

liveBookmanning.com

Read Kubernetes for Developers on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Real-World CryptographyTLS is the Transport Layer Security protocol for securing network communications through authentication, confidentiality, and integrity.
• 

  liveBookmanning.com
  Software Security for DevelopersTLS is a cryptographic protocol standard that provides confidentiality, integrity, and authenticated communication over networks.
• 

  liveBookmanning.com
  ASP.NET Core in Action, 3eTransport Layer Security is a cryptographic protocol that provides authenticated and encrypted communication over a network.
• 

  liveBookmanning.com
  Logs and TelemetryTransport Layer Security is a cryptographic protocol that authenticates endpoints and protects network communications against interception and tampering.
• 

  liveBookmanning.com
  Google Anthos in ActionTransport Layer Security is a cryptographic protocol that protects network communications with confidentiality, integrity, and endpoint authentication.
• 

  liveBookmanning.com
  Kafka for ArchitectsTLS is a cryptographic protocol that authenticates endpoints and protects data in transit through encryption and integrity checks.
• 

  liveBookmanning.com
  gRPC Microservices in GoSSL/TLS is a family of cryptographic communication protocols that authenticates peers and encrypts data exchanged over a network.
• 

  liveBookmanning.com
  Authorization in ActionTransport Layer Security is a cryptographic protocol that provides secure communication over a network, including encryption and peer authentication.
• 

  liveBookmanning.com
  Hacking CryptographyTLS is a cryptographic protocol for securing communications over computer networks.
• 

  liveBookmanning.com
  MongoDB 8.0 in Action, Third EditionTLS is a cryptographic network protocol that provides encrypted communication and server or client authentication over a network connection.
• 

  liveBookmanning.com
  Learn Docker in a Month of Lunches, Second EditionTLS is a cryptographic protocol that provides encrypted and authenticated communication over a network.
• 

  liveBookmanning.com
  Data-Driven CybersecurityTLS is a cryptographic protocol that provides secure communication over a network by protecting data confidentiality and integrity and authenticating endpoints.
• 

  liveBookmanning.com
  Grokking Web Application SecurityTLS is a cryptographic protocol that provides confidentiality, integrity, and authentication for network communications.
• 

  liveBookmanning.com
  Apache Kafka in ActionTransport Layer Security (TLS) is a cryptographic protocol that provides authenticated, encrypted communication and protects network traffic from eavesdropping and tampering.

Compare how 15 books explain TLS →

Related concepts

• HTTPSused by · HTTPS is HTTP carried over TLS, which provides encryption and endpoint authentication for network communication.
• public key cryptographyuses · Public-key cryptography is asymmetric cryptography that uses mathematically related public and private keys for encryption, decryption, signing, and verification.
• cipher suiteuses · A cipher suite is a defined or negotiated combination of cryptographic algorithms and parameters used to secure a communication session.
• heartbeat extensionhas part · The TLS heartbeat extension is a protocol extension that lets a peer request an arbitrary payload to be echoed for connection liveness checking.
• TCPuses · TCP is a connection-oriented transport-layer protocol that provides reliable, ordered delivery of byte streams between network endpoints.
• symmetric key encryptionuses · Symmetric-key encryption is cryptography that uses the same shared secret key, or equivalent derived key material, to encrypt and decrypt data.

This explainer was generated by Manning's knowledge graph from the text of Kubernetes for Developers. The section links point to the parts of the book it draws on.