This document summarizes a presentation about scaling the Indonesian government's Certificate Authority (CA) workloads using openSUSE Kubic and containerization. It provides background on the CA called Balai Sertifikasi Elektronik (BSrE) which serves over 14,000 users and has seen rapid growth. It discusses the problems BSrE faced with stability and resources due to increasing demand. It then explains how BSrE mitigated these issues by deploying their digital signature services on an openSUSE Kubic Kubernetes cluster for the benefits of containers being lightweight and Kubernetes' health checks and auto-scaling features. In conclusion, the speaker thanks the audience.

1. Scaling CA Workloads on
openSUSE Kubic
A Journey of Indonesian Government CA
on Containerized Microservices
Government Employees
National Cyber and Crypto Agency Republic of Indonesia
Arga D Pramudianto
arga.dhahana@bssn.go.id
s.id/linkedin-arga

2. Introduction
Name : Arga D Pramudianto, S.Tr.TP
Education : National Cyber and Crypto Institute (2015)
Experience : Government Employees on
National Cyber and Crypto Agency
Certification : ISO27001 Lead Implementer, COA, CDCP,
CCNA, CCNP, CKA
LinkedIn : s.id/linkedin-arga

3. Who are we?
●
One of the most growing Indonesian government
Certificate Authority (CA), named Balai Sertifikasi
Elektronik (BSrE), directed by Badan Siber dan
Sandi Negara (BSSN) Republic of Indonesia
●
Responsible for E-government security
implementation in Indonesia, mentioned on
“Peraturan Presiden Nomor 95 Tahun 2018”

4. BSrE users total amount
* Data 3 Oktober 2019

5. BSrE users growth last 2 years

6. The users fact, and why?
13.947 of 14.171 (98,4%) are digital signature service users

7. Digital signature legals in Indonesia
●
Undang Undang Nomor 11 Tahun 2008 tentang Informasi dan
Transaksi Elektronik
●
Undang Undang Nomor 19 Tahun 2016 tentang Perubahan
atas Undang Undang Nomor 11 Tahun 2008
●
Peraturan Pemerintah Nomor 82 Tahun 2012 tentang
Penyelenggaraan Sistem dan Transaksi Elektronik
●
Peraturan Presiden Nomor 95 Tahun 2018 tentang Sistem
Pemerintahan Berbasis Elektronik

8. BSrE cloud-based digital signatures standard

9. Major problems

10. Mitigation that we do

11. openSUSE Kubic takes part on it

12. openSUSE Kubic takes part on it

13. Is it worth?
●
openSUSE Kubic is quiet easy and fast to deploy
Kubernetes cluster with openSUSE (Max Huang long
talk session, 5 October 2019)
●
Container is lightweight and considerably reduce
the use of resources
●
Healthcheck and auto scaling mechanisms on
Kubernetes are awesome and save our days :D

14. Thank you