Overview

This workshop provides Platform Operators, Application Developers, and Application Operators with hands on experience deploying and securing multi-cloud applications utilizing Tetrate Service Bridge. Included are presentations, demos, and hands on labs.

The target state infrastucture architecture is comprised of 4 Kubernetes clusters:

• 2 clusters are deployed into one cloud -- Cloud A. Each cluster resides in a different region. One of these clusters will have a VM onboarded into the mesh.
• 1 cluster is deployed in a different cloud -- Cloud B
• 1 cluster is deployed to a public cloud and services a Tier 1 Gateway, service as a global load balancer across all clusters and clouds.

Workshop Agenda

1. Tetrate Introduction Slides
   1. Lab - Environment Access
2. Multi-tenancy Slides
   1. Lab - Multi-tenancy
   2. Lab - Application Deploy
3. Application Config & Traffic Mgmt Slides
   1. Lab - Multi-region, Multi-cloud Application Ingress
   2. Lab - Application Failover
4. Legacy VM Integration Slides
   1. Lab - VM Onboarding
5. Security Policy Slides
   1. Lab - Service to Service AuthN/Z
   2. Lab - End User JWT AuthN/Z
   3. Lab - Egress Policy

Applications

During this workshop we will be modeling 2 different applications that allow for various architecture and security patterns that span Multi-Cluster and Multi-Cloud.

Demo App

A simple frontend and backend application that allows simple testing of mesh networking and security. This application spans all clouds and clusters, which will allow us to test intelligent routing and failover

Market Data App

A simple application that retrieves market data. This application is deployed to a VM in order to demonstrate VM onboarding and hybrid security models.

Preparing Workshop environment

Follow the instructions in the workshop-101 branch of this repo..