1 of 15

Copyright © 2020 HashiCorp

Hyperledger fabric from docker-compose to orchestration:

Using vault & Consul-template for PKI management.

2 of 15

Agenda.

  • Basic Blockchain & Hyperledger fabric Intro
  • PKI engine
  • Demo
  • Basic cert-structure for fabric
  • How Vault & consul-template help
  • Translation to container orchestrators

3 of 15

What is a Blockchain?

4 of 15

Bitcoin.

5 of 15

Blockchain Network.

6 of 15

What is Hyperledger Fabric?

7 of 15

PKI, what is that??

8 of 15

PKI Components.

Source - https://hyperledger-fabric.readthedocs.io/en/release-2.2/identity/identity.html

9 of 15

Vault PKI Engine

10 of 15

Demo

11 of 15

Use In Nomad.

The template stanza.

​

​

template {

data = <<EOF

{{ with secret "NewOrg/issue/peer" "common_name=peer0.service.consul" }}

{{- .Data.certificate -}}

{{ end }}

EOF

}

CODE EDITOR

12 of 15

Summary

Vault & Consul-template allow for dynamic PKI setup,

which allows for scalable deployment of Fabric.

13 of 15

Resources

Fabric - Introduction

Consul-template - https://github.com/hashicorp/consul-template

PKI - Identity — hyperledger-fabricdocs master documentation

Vault PKI - Build Your Own Certificate Authority (CA) | Vault

Code - https://github.com/anonsachin/fabric-ca-net/tree/hashitalk2021

14 of 15

Sachin Gowda�(He/Him)

Blockchain Developer at NGP Web Smart

Twitter handle - @chaos_sachin

15 of 15

15

Thank You

​

​

hugs@hashicorp.com

learn.hashicorp.com

discuss.hashicorp.com