Page History

1. IBM booth demos:
   1. Workload runtime security (OH + KubeArmor + ???)
   2. Application-centric connectivity (OH + Skupper + ???)
   3. ML deployment automation (OH + TinyLlama? or Yolo v8 or v9?)
2. LF Edge booth demos:
   
   1. Handsfree device onboarding (OH + FDO + LF Edge Sandbox + Project EVE)
   2. Realtime workload metrics (OH + EdgeLake + Grafana + optionally KubeArmor)
   3. Dynamic runtime secrets binding (OpenBao with Open Horizon)

KubeArmor is the gold standard for workload runtime security

Value prop: Secure and harden your edge solutions using Security-by-default principles and active mitigation measures from Days 0 - N.

...

1. How do we stop, not just detect.  Not post-detect strategies but active mitigation.  Ex. application without hardening has these misconfigurations/access.  KubeArmor will sandbox the application behavior to only allow the specified behavior and nothing else.
2. Multiple applications on a device.  If one is compromised, the blast radius could impact other running containers.  How do you isolate the workloads to limit the blast radius.
3. Specific use cases for Vault
4. ORRA Kamakura demo showing addition of KubeArmor to the running application to enforce network micro-segmentation

Provide application-centric and -directed connectivity

Value-prop: Quickly connect deployed applications with remote resources in any location.  Align distributed application connectivity with the applications themselves so both can be deployed and managed together by the same team.

...

Adopters: IBM Hybrid Cloud Mesh with Red Hat Service Interconnect

Dynamic ML association/placement/delivery/bi-directional sync

Value prop: Associate ML models with the applications that use them while allowing independent delivery and lifecycle management of each.  Separate teams typically develop and maintain ML assets and their consuming applications.  Why force the assets and applications to be deployed together by the same pipelines?

...

Todo: Determine which models/framework to show, how to update?

Adopters:

Zero-touch device onboarding with FDO is a reality

Value prop: Use Open Horizon to host your FDO vouchers and device profiles for a complete FDO onboarding hosting service

...

Adopters: would Zededa be a potential adopter?

Proposed flow:

Use EdgeLake to access any edge data on-demand from anywhere

Pain points from transferring/streaming data to a central location for aggregation and insights generation:

...

Adopters: (feature sponsor: NS1)

OpenBao is approaching Alpha release and becoming an independent project

Value prop: Open Horizon uses OpenBao for dynamic runtime secrets binding with containerized workloads on both bare Linux hosts and in Kubernetes clusters.

...