►
Description
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe 2023 in Amsterdam, The Netherlands from April 17-21. Learn more at https://kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Enable a Cloud Native Edge Without Lock-Ins - Marc Meunier, Arm
To help developers achieve portable, yet secure solutions for the Edge of your network, Arm has launched Project Cassini, an umbrella project that pulls together 3 projects to enable secure cloud native development at the edge and in IoT devices. During this talk we will go over the 3 sub-projects that form Project Cassini: 1. Project Parsec, a CNCF project that provides a turnkey solution to secure Kubernetes deployments while maintaining portability across any device. 2. PSA certified program which complements Parsec by providing a 3rd party certification to validate the root of trust of your system. 3. SystemReady certification, to ensure standard OSs boot out of the box, so you can focus on your Kubernetes deployment.
A
All
right,
I
think
I'm
ready
to
start
I
get
the
the
amazing
spot
of
talking
just
before
lunch
and
I
know
how
everybody's
getting
hungry
so
I
gotta
make
this
quick.
I
got
10
minutes.
So,
first
of
all,
my
name
is
Mark.
Mignier
I
work
for
arm
an
ecosystem
development,
so
I
sit
on
top
of
the
the
actual
team
that
builds
the
IP
and
work
with
software
companies
like
those
that
are
in
this
room
here
today
to
advance
new
Concepts
and
projects
into
the
market.
A
So
when
we
think
about
the
kubernetes
deployments
and
everything
that
we've
talked
about
earlier
today,
one
of
the
goals
that
we're
aiming
to
achieve
here
is
the
ability
to
create
portable
code,
like
everything
that
we're
talking
about
here
relies
on
this
on
this.
This
principle
for
multiple
reasons:
one
the
ability
to
accelerate
your
development
right,
creating
your
applications
in
the
cloud
and
then
being
able
to
move
that
to
your
Edge
devices,
but
also
in
the
cases
where
you
need
to
consider
migrating
your
applications
from
one
device
to
another.
A
We've
heard
a
lot
of
talks
this
morning
about
different
verticals
that
are
picking
up
kubernetes.
You
can
imagine
a
lot
of
those
applications
are
similar
and
they're
moving
across
the
different
verticals
and,
of
course,
the
hardware
that
you're
going
to
be
presented
with
will
look
very
different
in
these
different
verticals,
so
the
it's
important
to
create
portable
code.
It's
also
important
to
secure
your
code,
make
sure
that
everything
that
you
develop
is
secure,
and
that
poses
its
own
challenge.
A
Of
course,
when
you
move
kubernetes
applications
to
the
edge
the
surface
of
attack,
it's
much
greater,
so
you
do
need
to
consider.
Maybe
putting
a
little
bit
more
diligence
on
the
security
design
of
your
system
and,
of
course,
you're.
You
want
to
protect
your
IP
a
lot
of
the
a
lot
of
the
discussions
this
morning
talked
about
Ai
and
ML,
and
when
you
think
about
the
models
that
are
created
to
draw
that
value
from
the
data
that's
collected,
you
want
to
protect
that
those
models.
So
again,
security
plays
a
key
role
in
these
deployments.
A
The
projects
is
called
project
Cassini.
That's
our
umbrella
project
that
centers
on
bringing
tools
to
the
market
that
solve
problems
around
Cloud
native
development
at
the
edge
and
this
this
Cassini
umbrella
project
has
numerous
programs
below
it
here.
We're
highlighting
a
few
Arm
System
ready
is
the
first
one
I'll
talk
about
it.
Deals
with
you
know
in
a
nutshell,
making
sure
that
you
can
run
an
OS,
a
standard
OS
on
any
hardware.
A
So
the
goal
here
is
we
work
with
our
silicon
manufacturers.
We
work
with
odms
and
oems.
We
give
them
recipes
and
guides
to
develop
their
devices,
and
then
we
test
them
in
a
certification
lab
to
make
sure
that
standard
operating
systems
can
just
boot
and
there's
different
bands
of
this
program
for
different
types
of
devices.
You
may
have
devices
that
use
device
tree
to
identify
the
peripherals
that
are
in
the
device
or
it
may
rely
on
UCP
UE
EFI.
A
Moving
to
the
other
side,
around
security
PSA
certified
is
the
foundation.
When
you
see
a
device,
that's
PSA
certified.
You
can
be
assured
that
it's
following
the
best
practices
around
security
that
there's
a
hardware
route
of
trust
being
used
in
the
system
and
that
helps
accelerate
industry.
Specific
certification
work
if
you're
dealing
with
nist
or
any
other
certification
body
chances
are
they're
familiar
with
the
PSA
certification
program
and
that
can
help
accelerate
your
steps
into
those
certification
bodies.
A
I'm,
not
gonna,
I'm
gonna
jump
over
parsec
I've
got
a
slide
specifically
on
that
one,
but
to
wrap
up
this.
This
slide
here
when
we
think
about
these
programs
that
are
created,
we
drive
these
into
the
market
through
proof
of
Concepts
through
blueprints
that
we
do
with
the
community.
So
these
projects
are
are
there
to
serve
the
community
and
we
work
with
you
guys
to
try
to
solve
specific
problems,
leveraging
these
tools.
A
Now,
as
I
mentioned,
parsec
is
one
that
I
skipped
on
the
security
side.
What
parsec
does
I
think
is
a
little
bit
more
applicable
to
the
folks
here.
It
exposes
a
standard
set
of
apis
in
various
languages
that
connect
down
to
the
root
of
trust
in
your
system.
So
the
idea
here
is
we're
creating
an
extraction
layer
that
allows
you
to
connect
into
various
Hardware
routes
of
trust
that
use
different
apis
to
accomplish
security
functions
that
you
need
as
a
cloud
native
developer.
A
A
Now
another
advantage
of
parsec
is
if
your
application,
your
security
functions,
need
to
be
ported
from
one
device
to
another.
You
can
change
the
back
end
and
never
have
a
change,
no
impact
to
your
software
above
parsec,
so
parsec,
truly
abstracts
the
interface
to
the
hardware
root
of
trust
in
your
system.
A
A
Now,
how
do
you
take
advantage
of
these
programs
well
for
one
when
you
think
about
system
ready
and
PSA
you'll
want
to
look
for
those
programs,
you'll
want
to
work
with
your
suppliers
and
make
sure
that
they're
following
those
best
practices,
and
that
the
systems
that
you're
looking
to
deploy
on
have
these
badges?
That
will
just
simplify
your
process
to
stand
your
applications
on
top
of
you
should
accelerate
your
development
should
make
sure
that
your
systems
are
secure.
A
When
you
think
about
parsec.
Look
for
that
those
interfaces,
it
comes
pre-loaded
in
a
few
distros
we're
working
with
distro
companies
today
to
integrate
further.
In
the
meantime,
there's
a
easy
script.
You
can
run
to
install
parsect
and
then
it's
just
a
matter
of
configuring
it
to
the
root
of
trust
in
this
system
and
then
exposing
the
client
interface
that
you
want.