00:51:43
Kubernetes (K8s) and Red Hat OpenShift Container Platform (RHOCP) misses the capabilities to allow containerized application (in POD) to use cryptographic functions provided by IBM Crypto Express cards on IBM Z & LinuxONE.The presentation describes a new extension to Kubernetes and RHOCP that allows a container running in a POD to access a domain of a Crypto Express adapter. The presentation describes how to set up the cluster infrastructure, how to configure which crypto resource belongs to which workload, and how software inside the container can access the crypto resource. The enablement requires a new component on the compute nodes which is called the Kubernetes device plug-in for IBM Crypto Express cards which is now available as a certified container image in the Red Hat catalogue.