Page History

• Priority list for ONE Summit demos:
  1. Workload runtime security (OH + KubeArmor + ???)
  2. Handsfree device onboarding (OH + FDO + LF Edge Sandbox + Project EVE)
  3. Realtime workload metrics (OH + EdgeLake + Grafana + optionally KubeArmor)
  4. OpenBao + Open Horizon
  5. LFN Hybrid Cloud Blueprint (OH + Skupper + ???)
  6. ML deployment automation (OH + TinyLlama? or Yolo v8 or v9?)

Demonstrate OH managing ML placement/delivery/bi-directional sync

Value prop: Models are trained in the cloud or elsewhere, but don't have the ability to deliver securely to edge devices.  OH can be that last mile delivery solution.

Owner: Jeff Lu 

Todo: Determine which models/framework to show, how to update?

Adopters:

OpenBao is approaching Alpha release and becoming an independent project

Value prop: Open Horizon uses OpenBao for dynamic runtime secrets binding with containerized workloads on both bare Linux hosts and in Kubernetes clusters.

Owner: Nathan Phelps and Troy Fine 

Todo: Get AIO using OpenBao, then demonstrate Hello Secrets World

Adopters: IBM Edge Application Manager, IBM Hybrid Cloud Mesh

Demo details: 

1. Create a secret in the OpenBao secrets manager named hw-secret-name
2. Register an edge node with the helloSecretWorld example service
3. Show the "<your-node-id> says: Hello <secret-value>!" output of the service in a separate terminal updating every 5 seconds ("<secret-value>" here is the contents of the hw-secret-name secret)
4. Update the hw-secret-name secret with a new value "<new-secret-value>"
5. A few seconds later in the still open terminal window being updated live with the service output, observe the output change to "<your-node-id> says: Hello <new-secret-value>!"

KubeArmor is the gold standard for workload runtime security

...

Adopters: (feature sponsor: NS1)

OpenBao is approaching Alpha release and becoming an independent project

Value prop: Open Horizon uses OpenBao for dynamic runtime secrets binding with containerized workloads on both bare Linux hosts and in Kubernetes clusters.

Owner: Nathan Phelps and Troy Fine 

Todo: Get AIO using OpenBao, then demonstrate Hello Secrets World

Adopters: IBM Edge Application Manager, IBM Hybrid Cloud Mesh

Demo details: 

1. Create a secret in the OpenBao secrets manager named hw-secret-name
2. Register an edge node with the helloSecretWorld example service
3. Show the "<your-node-id> says: Hello <secret-value>!" output of the service in a separate terminal updating every 5 seconds ("<secret-value>" here is the contents of the hw-secret-name secret)
4. Update the hw-secret-name secret with a new value "<new-secret-value>"
5. A few seconds later in the still open terminal window being updated live with the service output, observe the output change to "<your-node-id> says: Hello <new-secret-value>!"

Demonstrate OH managing ML placement/delivery/bi-directional sync

Value prop: Models are trained in the cloud or elsewhere, but don't have the ability to deliver securely to edge devices.  OH can be that last mile delivery solution.

Owner: Jeff Lu 

Todo: Determine which models/framework to show, how to update?

Adopters:

Provide application-centric and -directed connectivity

...