Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CNCF Zero Trust Whitepaper #1229

Open
wants to merge 111 commits into
base: main
Choose a base branch
from
Open

CNCF Zero Trust Whitepaper #1229

wants to merge 111 commits into from

Conversation

mrsabath
Copy link

@mrsabath mrsabath commented Feb 2, 2024

This is an attempt to convert the CNCF Zero Trust Whitepaper to Markdown format as requested by the community.
The original document: https://docs.google.com/document/d/10g2390JdCBXmSmzQ_EGHFWrg2JosPsXLaqXaGQ-B9NA/edit?usp=sharing

CNCF issue: #950

This is still a draft. I just started the conversion and it requires more work and cleanup

@netlify Netlify
Copy link

netlify bot commented Feb 2, 2024 •
edited

✅ Deploy Preview for tag-security ready!

Name Link
🔨 Latest commit 19dd43e
🔍 Latest deploy log https://app.netlify.com/sites/tag-security/deploys/6659dee55c1e0c0008497025
😎 Deploy Preview https://deploy-preview-1229--tag-security.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@PushkarJ
Copy link
Collaborator

PushkarJ commented Feb 7, 2024

Thank you for opening the PR. @mrsabath as you make progress to make this "merge ready" please also address the linter, spellchecks and link checker output in the above CI checks

@PushkarJ PushkarJ mentioned this pull request Feb 8, 2024
Open
9 tasks
y-tabata
y-tabata reviewed Feb 17, 2024
View reviewed changes
zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md

#### Data in Transit

To ensure all communications in-transit are encrypted, all services should be using TLS (at least a version 1.2), and all clients need to verify the certificates presented by the server. CNCF projects offering TLS and certificates to protect inter-service communication include [Istio](https://istio.io/), [Linkerd](https://linkerd.io/), [Dapr](https://dapr.io/), and [Knative](https://knative.dev/).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the recommendation for cipher suites as described in RFC9325 unnecessary?
It might be a good idea to just link to BCP195.

@mrsabath
Copy link
Author

Thank you @y-tabata for your suggestions. The automation I used for converting from Doc to Markdown is not perfect and even though I did a lot of manual updates, there are still bugs that you were able to discover

mrsabath and others added 18 commits March 27, 2024 10:42
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
9362f9b 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
2b66edc 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@zerb4t @mrsabath
[Supply chain Compromises] Adding Retool, ManageEngine, FDM (cncf#1231)
d5a96ae 
* Create retool-portal-mfa.md

Signed-off-by: zerb4t <[email protected]>

* Create xmlsec-manageengine.md

Signed-off-by: zerb4t <[email protected]>

* Update retool-portal-mfa.md

Signed-off-by: zerb4t <[email protected]>

* Create trojanized-fdm.md

Signed-off-by: zerb4t <[email protected]>

* Update README.md

Signed-off-by: zerb4t <[email protected]>

* Change login-bell to 1975

Signed-off-by: zerb4t <[email protected]>

* Update README.md

Signed-off-by: zerb4t <[email protected]>

* Update trojanized-fdm.md

Signed-off-by: zerb4t <[email protected]>

* Update retool-portal-mfa.md

Signed-off-by: zerb4t <[email protected]>

* Update xmlsec-manageengine.md

Signed-off-by: zerb4t <[email protected]>

* Update trojanized-fdm.md

Signed-off-by: zerb4t <[email protected]>

* Update trojanized-fdm.md

Signed-off-by: zerb4t <[email protected]>

* Update retool-portal-mfa.md

Signed-off-by: zerb4t <[email protected]>

* Update xmlsec-manageengine.md

Signed-off-by: zerb4t <[email protected]>

* Update login-bell.md

Signed-off-by: zerb4t <[email protected]>

* Update retool-portal-mfa.md

Signed-off-by: zerb4t <[email protected]>

* Update xmlsec-manageengine.md

Signed-off-by: zerb4t <[email protected]>

* Update login-bell.md

Signed-off-by: zerb4t <[email protected]>

---------

Signed-off-by: zerb4t <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@riaankleinhans @mrsabath
Update settings.yml (cncf#1232)
5fa4324 
Signed-off-by: Mariusz Sabath <[email protected]>
@lj365 @rhamzeh @mrsabath
OpenFGA Project security self-assessment update (cncf#1235)
9ee7ee3 
* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

- Basic Threat Landscape
- Secure Development Practices improved with status badges
- All-around fixes

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

community security pals credit

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

* Apply suggestions from code review

Co-authored-by: Raghd Hamzeh <[email protected]>
Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

fixed linting errors

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

spell, links and lint

Signed-off-by: Louis <[email protected]>

* Update lint-config.json

Signed-off-by: Louis <[email protected]>

* Update spelling-config.json

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

---------

Signed-off-by: Louis <[email protected]>
Co-authored-by: Raghd Hamzeh <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath
Post review edits
4f26490 
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
6a567b3 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
4db5d68 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
2d0d0de 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
6078633 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
3848427 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
e1609cd 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath
Formatting the paper
bd9e1e1 
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath
Post-review updates
b61b628 
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
126ee76 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@lj365 @rhamzeh @mrsabath
OpenFGA Project security self-assessment update (cncf#1235)
f58e721 
* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

- Basic Threat Landscape
- Secure Development Practices improved with status badges
- All-around fixes

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

community security pals credit

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

* Apply suggestions from code review

Co-authored-by: Raghd Hamzeh <[email protected]>
Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

fixed linting errors

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

spell, links and lint

Signed-off-by: Louis <[email protected]>

* Update lint-config.json

Signed-off-by: Louis <[email protected]>

* Update spelling-config.json

Signed-off-by: Louis <[email protected]>

* Update self-assessment.md

Signed-off-by: Louis <[email protected]>

---------

Signed-off-by: Louis <[email protected]>
Co-authored-by: Raghd Hamzeh <[email protected]>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
f0e052b 
Co-authored-by: Yoshiyuki Tabata <[email protected]>
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath
Formatting the paper
3bc18f8 
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath
Merge branch 'main' into zero-trust-whitepaper
6b1f0aa 
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath
Alphabetised spelling-config
ab30cd1 
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath
Minor format updates
6468b09 
Signed-off-by: Mariusz Sabath <[email protected]>
@mrsabath
Remove duplication
557dc49 
Signed-off-by: Mariusz Sabath <[email protected]>
mrsabath and others added 6 commits April 2, 2024 16:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jcchavezs jcchavezs jcchavezs left review comments

@davidhadas davidhadas davidhadas left review comments

@y-tabata y-tabata y-tabata left review comments

@ashutosh-narkar ashutosh-narkar Awaiting requested review from ashutosh-narkar

@ragashreeshekar ragashreeshekar Awaiting requested review from ragashreeshekar

@ultrasaurus ultrasaurus Awaiting requested review from ultrasaurus

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet