Hyperledger Foundation Hyperledger Bevel, 14 Jun 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Workshop Series: Hashicorp Vault for Hyperledger Bevel

Description

“Workshop Series: Hyperledger Bevel” is a series of free workshops designed to help you learn about blockchain technology and how it can be used in your projects. The first workshop will be on June 8th, and will cover the basics of Hashicorp Vault. You'll learn how to configure Hashicorp Vault to use Hyperledger Bevel.

Hashicorp Vault: https://learn.hashicorp.com/tutorials/vault/kubernetes-raft-deployment-guide?in=vault/kubernetes

Workshop Series: Hyperledger Bevel https://youtube.com/playlist?list=PL0MZ85B_96CFJUzic2ZF9rposfx2hr2rm

About the speaker: Sownak Roy - Technical Architect at Accenture and Technical Architect and a Maintainer of Hyperledger Bevel

More info:
Hyperledger Bevel is an accelerator by which developers can consistently deploy production-ready distributed networks across public and private cloud providers.

Hyperledger Bevel: https://wiki.hyperledger.org/display/BEV
Hyperledger Bevel's Discord: https://discord.gg/BqueuYWVD2

----
Hyperledger – Open Source Blockchain Technologies

Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use

Discord: https://discord.gg/rVCn4j7UFd
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory

Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter

Follow-us on Twitter @Hyperledger

Learn about Hyperledger Membership: https://www.hyperledger.org/about/join

#Hyperledger #Blockchain
License
Creative Commons Attribution license (reuse allowed)

A

Okay, we are live hello. Everyone welcome good morning, good afternoon. uh It's a pleasure to see you again on the second workshop from the workshop series hyperledger battle today, we'll talk about hashcorp fault for hyperledger bevel.

A

The hyperledger brother workshop series is a great opportunity to learn about this exciting new technology.

A

Don't meet out register to another session to be the final uh I'll drop, a link to to the next event in the chat, and uh please welcome southern crowe, who is our speaker and he's also technical architect at accenture and technical architect and mightiner of hyper ledger level, and he will talk, say everything about the bevel and please uh welcome.

A

uh Could you start yeah hi hi, everyone, hello, uh so welcome to the second session of this workshop series we had.

B

uh The first one last week, uh and then we have the second that last one third and last one. I think in two days where.

A

You know you have the details on the chat, um so yeah, so bevel workshop series, uh legend bevel is is the newest uh hyperledger project uh and.

B

So this session is today's session will be about uh deploying hashtag of uh vault, and uh the previous session was.

A

About deploying the kubernetes cluster so.

B

Just on a I don't know if we can raise hands or something here.

A

B

Like everyone who is here has we'll be working along again. This is a hands-on workshop, so you're expected to run the commands as we go along.

A

Everyone who is here uh as a.

B

Participant is are able to have their own kubernetes cluster.

A

Are able to access their clusters just a show of hands, or I don't know if it is possible or yes in the chat.

A

Okay, uh so yeah. This is just the anti-trust policy notice for the recording and the live uh session, so yeah. So for those who said no.

B

Yeah, as this is one of the prerequisites uh for this session, uh you may watch the recording it's on youtube on how how do you do uh the.

A

Kubernetes cluster uh manage.

B

Kubernetes cluster deployment: it should be fairly easy if you're using man, you know like manage.

A

B

This one is for deploying vault on that same kubernetes cluster. So that's.

A

The question for everyone's: uh you know you can.

B

Answer on the chat is, is what is what is vault in general, when, when you hear the term fault, uh what do you understand, or in plain and simple english? What is what is vault.

A

So guys you can answer in the chat.

A

B

Got some good answers.

A

B

So in in general, I think whoever has given the generic answer. uh It.

A

B

Mahesh saying a place to keep things securely.

A

um Yeah, a secret store, alex saying.

B

That uh yeah, that is, that is correct in general, since a vault is, is where you, you store.

A

Things securely like in your home. You have a vault for example, um so uh when when it comes to software, um we have uh we have a vault which is which is used for storing uh storing secrets and credentials.

B

uh So it is not a credential management thing. I guess many people have have said that it is a credential management uh tool. It is not, it is not managing any credentials it is. It is just giving.

A

A secure way to store and access the credentials, store and storage and retrieval of uh credentials or secrets. uh You know it can be passwords, it can be generally.

B

We use in in bevel to store the public keys uh and the private keys uh yeah, so so yeah, uh so that's uh more or less correct, uh but just to correct everyone. Whoever has said it is. It is not a credential management.

A

Tool, it is a storage and retrieval and.

B

Yeah, it gives a lot of different options uh so um for uh just one brief on the history. Why we chose hashicorp vault in hyperledger bevel is is because hashicorp vault provides and again an abstraction for kind of the similar reasons we chose kubernetes as an abstraction layer.

B

Actually, vault is providing the abstraction layer on top of um of the cloud provider, so you are not tied to a single cloud provider, because all cloud providers have their own key management systems or you know key retrieval storage, uh but uh that will mean that you will get tied to a specific cloud provider if fashion of bevel said oh, it is only supporting aws, kms or azure kd.

B

So that is to avoid that we are using uh using hashicor vault hashicor vault can be deployed similar to kubernetes. It can be deployed on a laptop on a desktop or on on even on cloud, even on on your very highly secure data centers as well, and then you can have all the other advantages of world is that it can yeah it can connect.

B

um You know use the native cloud provided kms services to integrate uh some of the aspects of the world, for example, in our case in aws, in our dev dev and test environment, we use the automatic unseal of the keys uh for uh for uh using the aws kms itself. So so all of these can be, uh they can be integrated with vault uh to make it much more.

A

B

So, uh and that that was the reason for selection of vault.

A

um And for so that's more or less here any uh questions uh till now, yeah!

A

So is there any question.

B

Okay, if not, then yeah so for today's session, uh we we- these are the prerequisites.

A

uh We, you should have a kubernetes cluster, and uh you should, of course uh have a laptop desktop from where you're connecting right.

B

So let's start uh hands-on workshop or you should have your access or communities cluster up and running. If you have not, you know you, you, uh maybe sleep like the nodes to zero, just increase the number of nodes so that you have a your cluster.

A

Working, I will um yeah so just go back and I'll share, share the link on the chat.

A

A

So we are here: okay, maybe I'll just put it here and I'll run. The commands from my.

A

I should be okay from zoom point of view right.

A

So before we start you have, you can.

B

Check your kubernetes config, so mine is here and then I just run the same command as cube. Ctl get words minus.

A

A to check that yeah- I am I'm on the on the right, uh kubernetes cluster. uh So as.

B

You can see it's my google kubernetes cluster, which has doesn't have anything uh additional uh right now, uh mostly all the cube system, pods uh that are running.

A

At with, for for the specific gke cluster that I have created,.

A

Okay, so first first, so if we there are.

B

Some concepts and all in in the deployment guide, we are using uh basic deployment guide so that you know you don't uh get confused with all this, how to do it on mini cube and how using console we will use very basic uh things. Okay, how question is how do we get cube config on laptop right.

A

A

uh Depends on so I'm showing kubernetes uh on on.

A

B

Gke right, I'm on google, so you can. How do you get it on laptop? Is you first export I mean by default it will be in uh dot, cube, slash, config, your default cube config. If you want to save it in another one another place, you can just do this, for example, uh export the config as.

A

A

Equals to say and give your path where you want to store your cube config. So for me.

B

A

And then I renamed it as this file bevel dash.

B

Workshop ws.yaml, so that's now set, and then after this is set, you go to your you know. Wherever your cloud, there is an option to. If you open this kubernetes cluster details there is this connect, ops command. You can copy this and then.

A

A

B

Yeah, that's how you get your kubernetes.

A

B

Cube config in your laptop.

B

It will be a little bit different for aws, for example,.

A

uh If you are, unfortunately using mini cube, it.

B

Should already be set by default at uh dot cube config, you can check if you have the right cube config by also checking giving this command cube. Ctl config.

A

View so it shows my details, my cube config details.

A

Okay, hopefully, that answered the question.

A

B

A

B

Is some uh uh on on details on you know world reference architecture and all that, so we will skip that for now. You can do read that in your own time and to run this. Of course you will also need help, so I already have helm.

B

In my system, if not, you can get uh by downloading it from the api, uh so I'll give you the link as well uh download helm. Three, please uh should be the default helm uh any. I am using 3.6.1.

A

uh So you can, you can use as well. So this is how to get help.

B

Okay, so let's do, let's start uh so, we'll first start uh by creating a separate namespace uh for uh on the kubernetes by using this command, give ctl create namespace vault. The name name of the namespace is vault. Namespace is like a logical separation inside kubernetes, uh whereas uh is almost similar to domain names, dns kind of thing.

B

So, if you create a create a namespace for vault, and then you create resources in that namespace that by default, everyone has in the only resources in that namespace will have access, and the advantage also is that you can directly just go and delete a whole namespace. So your all everything that was inside the namespace gets deleted.

A

We'll do that and.

B

That should create a namespace called vault. You can check the namespaces by running this command. uh Uctl get namespaces. So, as you see the by default, kubernetes had these namespaces default cube, node, lease queue, public and cubesystem, and I just now created this namespace called vault. As you see the age.

A

Is is 10 seconds.

B

A

Then you can check what objects you have in your namespace. We don't right now have any correct connection objects.

B

Right, the next step is to set up the helm repo. uh So let's do that.

A

Which is the command.

B

Oh, so, if you have that error, that means your kubernetes is not running or your cubeconfig file is wrong.

B

So and hence I said for to check before you start, you should check by running uh this command cube ctl, get words minus a.

A

This is command.

A

The learn command is here.

A

I'm not sure why.

B

You are not able to see the.

A

A

A

B

So what I did was I added the helm.

A

Repo now helm is, is a package manager similar.

B

To npm, uh but it is for kubernetes, uh so using helm you can you can we, we call them helm, charts, which you you collect, everything that is related to a specific release, uh and then you can store those charts in something called helm, repo repositories, and then you have a name for that element. Repo, and this command is doing that. You are adding that helm, uh the helm repo to your local helm repository basically. So that is what it says. As you cop, when I run this command, hashicorp has been added to your repositories.

B

Then you are searching for that particular chart in the next command, which is.

A

Helm search repo hashtag vault, so it.

B

Shows here um this is the there is the latest one. So the chart version is 0 21, but the app version is 1. 10 3.

B

Okay, so uh the other thing uh one thing uh so here the app version means the hashtag world version. uh Hashicorp 1.10.3 is not supported by bevel. The highest we are supporting right now is 1.7.4, so we'll have to install that version. Okay. So what we'll do we'll do we'll search for.

A

The rest of the versions, helm, search, repo azure.

B

Cup vault minus minus versions.

B

And we'll see so 1.7.4.

A

Is not there? We can use 173 because it is a bit lower.

A

B

Any questions until now.

A

B

Okay, so did you get your kubernetes config corrected so that you are able to connect to the cluster? By now.

A

Okay, okay, so.

A

Yeah I mean when you attended you when you attended the.

B

You know the in-person workshop in london. I thought you we already have reached this point, but yeah, maybe you have, you know, deleted the cluster and recreated it and hence it needs.

A

A new kubernetes config file.

A

B

For the next one uh next command, we are now installing uh the the helm chart. There is a in this place. There is a kind of common things how you run a helm command, but in general you do help install. Then you give the release name and, and then you have the chart name and then uh it is namespace. Is uh you give the name space on which this release will be deployed? And then uh because we are, we have to deploy a specific chart version. We have to give the version.

B

So, as I, as you listed here, uh the version we'll be using is 0 0 13 0, because that's what is deploying world.

A

Version 173 which, which we want so you copy this and yeah, give the version a command.

A

Okay. That's it I'll paste this command in the chat.

A

Okay, so now it says it has been deployed.

B

A

Let's see how it is, it looks.

B

Okay, so if you do give ctl get.

A

Go back with all the get all uh so we see uh it has been deployed.

B

We we have in qctl, minus namespace, vault get all. If we do, we have two parts, then we have uh the services and then we have some deployment and all so there's one thing wrong here, which is that uh the service is a cluster ip.

A

So that's that's a problem uh because uh we need uh this service to.

B

Be available over the internet and.

A

Hence it should be a load balancer, so we'll we'll have to fix that.

A

Okay, we'll see how do we fix that.

B

I'll create a small file called override. It is I mean the details. Are there in this chart in the value itself in in sorry, in the in the guide that we're following itself, but I'll.

A

A

Additional things as well so.

A

Let's open an editor.

A

So I'm just writing a file uh here uh uh on a new. You know if I view I'm using atom, uh but you can. You can use your preferred editor with no issue with that.

A

B

A

B

A

It needs is, is this part where you are enabling the vault ui.

B

So uh this one uh you can, if you see uh the.

A

I'll show you the section here, so it's I'm just I just copied.

B

This part from the end of this file, because this is a sample uh override file which you can override use to overwrite the values that is by the default values that was set when you ran the helm, install command.

B

So what this is saying is to enable uh the ui and then use the service type as load balancer and not use a node port. It says null and then external port is eight two zero zero.

A

If you have uh in some cases you.

B

May have you know, uh restrictions on those ports like uh can't access, eight to zero shouldn't they allow and all that in that case you can change this port, and uh if you see uh the guide here, you can also see that for added security, you can add ip. uh The source ranges on the load balancer as well, so that only only this ip will be able to connect to world, but anyway, vault will have, of course, because it is secure.

B

uh It will have access control uh so you'll, not uh it is even if you- and this is your doing- a test in real life scenarios. Of course, vault will be behind behind a in inside the dmz, behind a dmz or behind a firewall, or it should not be exposed.

A

Over the internet, uh it's just for our uh to make it easier. uh We are using it as such.

B

Okay, so uh then you save this file.

A

B

B

A

Yeah, so I've saved it, as here.

B

Then I'll do is I'll uninstall the existing vault. First uh then it's easy. You can also upgrade but I'll uninstall so to show you the command as well. So how do you uninstall a helm, is using a simple column, helm uninstall!

B

A

Give the name space, because this is created in this namespace.

B

And then the name of the release, which is voltage.

B

Okay, so that has been uninstalled now we'll redo the installation.

A

With uh yeah I'll cut just second.

A

Yeah, it's that.

A

B

A

Redo the installation with the minus f command, uh which basically means.

B

uh Is providing this file as the override value, so everything else remains the same. Just do.

A

This minus f, override values.com.

A

Okay, now, if we see the get all.

B

We'll see that you have vault ui, which has a which is creating a load balancer. The external life is still pending, uh but.

A

It will surely come up very soon. We will have to wait for that.

B

It because it's creating a external hyphen takes a little bit of time.

A

Any questions till now I'll do that again. So yeah we have the external ip.

A

So now, with the external ip, I will go there.

A

And we know the port because we have asked for this port and that's how you have the wall ui right uh james. um I didn't get you sorry, the reinstall uh you mean the uninstall so I'll give the command for uninstall as well.

A

That's the uninstall and then that's the reinstall with the override parameters file.

A

B

So now you are at the vault ui. uh I just.

A

Grabbed the ip address, which is when I do or.

B

A

Can do also cube ctl get services.

A

Minus namespace.

B

Vault, so if I do that I'll see that vault ui has a service called load balancer- and this is only service that has an external ip, so when I call copy the external ip and the port is eight two zero zero. If you're not sure you can also check there, the port is eight two zero zero. So if you are using a different port, you you grab that port, so I opened it and by default it will forward to uh this this page.

B

This is only at the start of your vault, because now the vault is has been installed first time, so it is going to be you. uh It has to be initialized. So if you're doing uh for the second time it will be different. So once you are here, so there are uh two options here. So basically, this is how you create the number of unsealed keys like like a physical vault. Every vault needs a key to unseal. It unlock it.

B

um So for that you will need unsealed key you can generate, for you know I I for now we can do one and one. So that means you will only get one key and you know you have to provide one key, but in generally uh in other scenarios you should have like five or and three so that means you will generate.

B

uh You'll generate five keys, uh but then you will need at least three of those five keys to unseal, but this is a dev environment, um so I'll use one and one uh to create the master keys. uh Should an ingress be used with the deployed load balancer that bevel deploys. I'm not sure the question is that we have not used bevel. As of till now,.

A

uh So this is, this is uh just pure vault.

B

Deployment this yeah bevel has not been used until now.

B

So if the question is about bevel, which we'll be doing in in two days time, uh bevel deploys a load.

A

Balancer for amber you, for uh which is ambassador uh or uh in ha proxy hr proxy, is only used for for fabric. So that's where bevel deploys.

B

uh Bev, should wall be deployed on the same cluster that we will know that is not necessary. You can deploy vault on a different cluster as well yeah, so I'm showing it uh the deployment of vault on the cluster, because that's uh that's right now. The easiest thing to do, because if you deploy it on a separate cluster, you have to ensure that there is in the class, the bevel cluster and the wall. Cluster should also be able to talk to each other on that board.

A

If you, I don't.

B

Know if you follow our discord channel, there were some questions regarding that, uh because I guess someone deployed vault on their own machine and but they deployed the cluster on on gk on cloud and then the cloud kubernetes was not able to reach the vault on the machine because that's not how it works yeah, but it is possible. uh It is not that uh the vault should be. I mean in in essence, when we deploy vault, we deploy this thing for clients. We we create vault on a separate vm instead of on the kubernetes cluster.

B

Okay, so this will generate keys, which I'll hide from.

A

B

A

B

Just click on initialize.

B

If you get an ssl error, you are trying to give to https, but it is not https. Maybe james.

A

Okay, it is not showing so I'm safe.

B

So yeah, if I click that you will have this initial root token and the key I have downloaded the keys and then I will just go continue to unseal. Now again, as I said for unsealing you will, you will need to.

B

You will need to uh open.

A

You know provide one of the keys, so let's do that.

A

And yeah so now the vault is unsealed.

B

As you see with the green thing here, uh and then you just now have to provide the token, which is the root token.

A

For initial login.

B

And yeah, so both the unsealed keys and the root token you should be. You should be safe. You know safeguarding it.

A

And save it somewhere safe uh is same as as a key to your vault.

B

In your house, uh the only uh advantage when you are you deploying it on on using a vm or even even on uh yeah, especially using a vm. uh You can do the unsealed key management via the cloud kms, for example, aws, kms or google keys. uh You can do that, so it will always whenever you restart vault, it will automatically unseal.

B

But in other cases, if you are not doing that, then, if you restart vault, you have to unseal the vault again, because what vault thinks is, if you are restarting the machine, vault kind of identifies it as an attack and.

A

And you have to give the keys again.

B

I mean similar to when, when you restart your phone.

A

It asks for your password.

A

B

So this is how uh the world front end looks like uh you have uh you know the secrets here: we'll do one small thing before we progress, but that's more or less what we are done, we'll have the accesses here and in the policies. So once we, when we do the deployment um we're using bevel, then we'll come and see how these entries in these things are changing.

A

Okay, so any questions still for on now.

B

Otherwise, I'll just show a little uh to enable a new engine uh so because I think uh by default we're using secrets between some of the things. So we can do it again. So you have to enable a new engine uh for v2 uh version uh and give it a different name, and this name will be used in in.

A

Bevel configuration file, so we we give the name as uh secrets v2.

B

And just to ensure uh that the version is v2 uh in this, you can choose one. But right now the current project doesn't support version one. So don't do that uh so choose version v2 and give a name called secrecy. You can give it any other name as well as long as you remember. Remember it because you'll need it when you do.

A

The configuration for for the network yaml yeah and then you click on enable engine and and that's all so you will then.

B

You will see a new engine called secrets, v2 and it says it's a v2 engine.

A

B

A

Type of type kv.

B

Or key value that has been enabled on world, though it doesn't have.

A

Anything inside it right now.

A

Okay and uh yeah- that's uh pretty much for uh for this session. uh uh If are there any questions? Did you get.

B

So what is the recommended approach to store secrets for bevel in production.

A

For backend backend or engine recommended.

B

So the seek to store secrets, the recommended approach.

A

B

A

B

uh The recommended approach, as I said, was to do uh setup vault on a separate vm. It should be in the same vpc as your kubernetes cluster, uh but it should be, it will be, should be on a different vm and it should be internal ip so that it is not accessible.

A

Via from external, and it should only be accessible from a vpc from a.

B

Pod or or a machine which is inside.

A

B

Same vpc and, of course you need access to the from your ansible controller, from where you will run the bevel commands, as well as from the kubernetes cluster, and for the engine wise. There is no secret, we use kv, so there is no recommendation. That is the only only approach you can do is use kv, which I just created. A world v2 version of a kv.

B

Okay, so the other question from james was: can you type the key to unseal, not sure what you mean? If you mean, if I you can run the commands from here as well or not, then yes, I'll just.

A

Check if I have vault.

B

Yes, I I do have vault uh so for that you will need uh vault uh uh again same similar to help. You will need the vault client um so and then you export the vault address.

A

Which is same as this one, not without the ui and all that.

B

Okay, then, if you do vault status, it will show for me it is showing that it is initialized as true, and it is uh sealed, as.

A

False so that means it is unsealed and it is initialized, so we can access that.

B

uh You mean via the ui. No, I can't show it via the ui, because that's only one time.

A

I mean if you reach the ui, you should have uh have the.

B

The concept of giving the number of key shares and all that and I used one and one.

B

Yeah, it was a hex key, it's not a six digit key to the key that you downloaded the json file that you downloaded the base64 one is the one that you should pass. uh So there are in that.

B

If you have one and uh if you had one key share and one uh you know one and one in there, you should have only one key and what it is asking for is the you should pass the values called for keys, base64 and then it will unseal and then you will pass the root token to uh to enter yeah I mean you should have downloaded the keys when when they were generated, I mean, if you have misplaced it, uh there is no harm down one you can do.

B

Is you can un uninstall everything uninstall, not everything, uninstall, vault and reinstall? So you will, it will add, for the it is not asking for keys for gcp. It is asking for the key that was gen that was generated when you enter press enter.

A

So you should be able to see in the.

B

A

B

If you're stuck.

A

B

A

B

B

You have vault installed on cube, but when you enter yeah, you have to download the keys after you initialize right, yeah.

B

Have you initialized the vault.

B

Yeah and is the.

A

Is the ui showing this.

A

B

Or is it showing something else.

B

Yeah, so if you, if it is in the unsealed page, you should have one. If you have, you should have download put one and one in those two boxes for the key shares and then pressed, enter or either forgot the key, the exact name. Then then it would have generated a token and uh unsealed key and there was an option to download those keys, or at least you can copy the keys.

B

If you have not done that, uh it's fine, you can just uninstall with the uninstall commands I have given and reinstall. Then it you can do that yeah most likely. You have not downloaded the keys.

B

You cannot go back.

B

You can uninstall and reinstall uh to do download that because then it will generate a new set of keys.

A

Yes, yeah yeah, with help.

B

I'll uninstall, the commands that I gave a few minutes.

A

Ago, with yeah uninstall.

B

A

A

Okay, uh so again, super important things are, of course, for the next class uh next workshop, uh your address.

B

The ip address or the vault address should be accessible from your computer, which I guess you will be using for as the uncivil controller.

A

If you are going to use.

B

um Wsl or anything else, any other machine make sure that you can access the this. This vault ip with this address exact same address uh from that machine as well or the wsl or the docker container, whatever you're using and you will. You will need the root token uh for the next session, because that's what you pass and you will need the name of this. This uh kv that you created. If you are using secrets, v2, it's fine, uh but if you're given a different name, you will.

B

You will need that that name and then, of course, you will need the kubernetes config file, the cube config file, which by now you already have because you're using connecting to kubernetes uh cubesat using cube ctl from your machine right now again just ensure that the cubesat commands work from your ansible controller, which can be your wsl machine or or ubuntu different ubuntu machine, and all that um so yeah so install vault helm, uh though they get installed uh by the ansible uh command as well, but just make sure you have cube ctl, vault and.

A

Helm in three basic helm in your in the path.

A

There, um I am not sure what are the significant differences uh for vault enterprise.

B

Most likely it is licensed and you will have support from hashicorp for that. uh But we have not used any any additional uh features from the vault enterprise because we have kept everything open source.

B

In a production environment most likely, you will use vault enterprise, because you, if you, if you you don't want to, if there is any problem in the world itself, you don't want to debug or something um we. We have deployed vault for and cons using console as the back end as well for some of the clients. uh But I I've not not used any enter.

A

For india, vault enterprise for anyone.

B

Yeah, so I think that's.

A

uh Exactly what michael has said, uh your you'll have uh the aha and all that it's features of enterprise.

B

As well, you can do the high availability uh with.

A

B

So you you can do the high availability with other kind of storages as well, uh but I think on kubernetes it default uses the file storage.

B

So the next meeting details have been shared multiple times on this chat.

A

A

I'll share again, no, I didn't copy.

B

Yeah, for some reason I'm not able to copy, but it is.

A

Oh yeah, okay, um so it's the next uh in in on.

B

Thursday, basically in two days time and it's a longer workshop but expected uh we'll be working using bevel commands, um I mean that's when we'll start using bevel, mainly this was just a prelude uh two sessions so uh make, as I said, ensure that your kubernetes cluster is up and running.

A

And uh vault is accessible for the next session.

B

uh Which blockchain will be deployed? That will depend on which people are comfortable with.

A

um So um we have seen we can do fabric uh as well, uh because um uh yeah fabric is all right. uh I think we will be doing fabric uh besides two session, any other prerequisites for thursday uh yeah. So I think they were. Let me see my slide deck so.

B

Yeah the main prerequisites for thursday is uh your kubernetes cluster, your hashtag vault. You don't have to attend the sessions, uh but you can see the recordings. uh You need the kubernetes cluster. You need hashtag vault deployed accessible from the kubernetes cluster and and you will need a machine where you can run docker, so you should be able to run docker commands if it is wsl. It's all fine. I have to figure out the networking yourself, but you.

A

Will need a machine where you can run docker commands, okay,.

B

uh No, no, there is no version requirement for docker fabric version. We will be deploying 2.2.2 because that's what is supported.

B

Recordings will be available on youtube hyperledger channel, so you should be able to see that.

B

No, we are not going to deploy the supply chain application because I know many people are using very small kubernetes cluster and the whole supply chain. Application will not be able to run on it, and most people will not be using a dns names to access the front end and the apis.

B

So we'll be only deploying fabric with width, we'll see if, if the chain code gets deployed or not, but we'll deploy the fabric piers with the fabrics. Sorry, the prcli, so that you can you can access the peers and deploy the.

A

Chain codes manually as well, if you need.

B

No, our domain name is not required for the next session because we'll be doing uh the internal kubernetes one and then that's why we are not going to deploy the supply chain application.

A

Okay, um so that's all from my site.

A

And yeah thanks thanks everyone thanks for joining and we'll see you on thursday uh 4 p.m.