Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CNCF Zero Trust Whitepaper #1229

Open
wants to merge 111 commits into
base: main
Choose a base branch
from
Open

CNCF Zero Trust Whitepaper #1229

wants to merge 111 commits into from

Conversation

mrsabath
Copy link

@mrsabath mrsabath commented Feb 2, 2024

This is an attempt to convert the CNCF Zero Trust Whitepaper to Markdown format as requested by the community.
The original document: https://docs.google.com/document/d/10g2390JdCBXmSmzQ_EGHFWrg2JosPsXLaqXaGQ-B9NA/edit?usp=sharing

CNCF issue: #950

This is still a draft. I just started the conversion and it requires more work and cleanup

@netlify Netlify
Copy link

netlify bot commented Feb 2, 2024 •
edited

✅ Deploy Preview for tag-security ready!

Name Link
🔨 Latest commit 19dd43e
🔍 Latest deploy log https://app.netlify.com/sites/tag-security/deploys/6659dee55c1e0c0008497025
😎 Deploy Preview https://deploy-preview-1229--tag-security.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@PushkarJ
Copy link
Collaborator

PushkarJ commented Feb 7, 2024

Thank you for opening the PR. @mrsabath as you make progress to make this "merge ready" please also address the linter, spellchecks and link checker output in the above CI checks

@PushkarJ PushkarJ mentioned this pull request Feb 8, 2024
Open
9 tasks
y-tabata
y-tabata reviewed Feb 17, 2024
View reviewed changes
zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md

#### Data in Transit

To ensure all communications in-transit are encrypted, all services should be using TLS (at least a version 1.2), and all clients need to verify the certificates presented by the server. CNCF projects offering TLS and certificates to protect inter-service communication include [Istio](https://istio.io/), [Linkerd](https://linkerd.io/), [Dapr](https://dapr.io/), and [Knative](https://knative.dev/).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the recommendation for cipher suites as described in RFC9325 unnecessary?
It might be a good idea to just link to BCP195.

@mrsabath
Copy link
Author

Thank you @y-tabata for your suggestions. The automation I used for converting from Doc to Markdown is not perfect and even though I did a lot of manual updates, there are still bugs that you were able to discover

mrsabath and others added 18 commits March 27, 2024 10:42
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
9362f9b 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
2b66edc 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@zerb4t @mrsabath
[Supply chain Compromises] Adding Retool, ManageEngine, FDM (cncf#1231)
d5a96ae 
* Create retool-portal-mfa.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Create xmlsec-manageengine.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update retool-portal-mfa.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Create trojanized-fdm.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update README.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Change login-bell to 1975

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update README.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update trojanized-fdm.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update retool-portal-mfa.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update xmlsec-manageengine.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update trojanized-fdm.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update trojanized-fdm.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update retool-portal-mfa.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update xmlsec-manageengine.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update login-bell.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update retool-portal-mfa.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update xmlsec-manageengine.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

* Update login-bell.md

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>

---------

Signed-off-by: zerb4t <117054988+zerb4t@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@riaankleinhans @mrsabath
Update settings.yml (cncf#1232)
5fa4324 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@lj365 @rhamzeh @mrsabath
OpenFGA Project security self-assessment update (cncf#1235)
9ee7ee3 
* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

- Basic Threat Landscape
- Secure Development Practices improved with status badges
- All-around fixes

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

community security pals credit

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Raghd Hamzeh <raghd@rhamzeh.com>
Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

fixed linting errors

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

spell, links and lint

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update lint-config.json

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update spelling-config.json

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

---------

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>
Co-authored-by: Raghd Hamzeh <raghd@rhamzeh.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Post review edits
4f26490 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
6a567b3 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
4db5d68 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
2d0d0de 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
6078633 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
3848427 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
e1609cd 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Formatting the paper
bd9e1e1 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Post-review updates
b61b628 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
126ee76 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@lj365 @rhamzeh @mrsabath
OpenFGA Project security self-assessment update (cncf#1235)
f58e721 
* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

- Basic Threat Landscape
- Secure Development Practices improved with status badges
- All-around fixes

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

community security pals credit

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Raghd Hamzeh <raghd@rhamzeh.com>
Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

fixed linting errors

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

spell, links and lint

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update lint-config.json

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update spelling-config.json

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

---------

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>
Co-authored-by: Raghd Hamzeh <raghd@rhamzeh.com>
@mrsabath @y-tabata
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
f0e052b 
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Formatting the paper
3bc18f8 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Merge branch 'main' into zero-trust-whitepaper
6b1f0aa 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Alphabetised spelling-config
ab30cd1 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Minor format updates
6468b09 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Remove duplication
557dc49 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
mrsabath and others added 6 commits April 2, 2024 16:36
@mrsabath @jcchavezs
Update zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
b051b10 
Co-authored-by: José Carlos Chávez <jcchavezs@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Merge branch 'main' into zero-trust-whitepaper
f43b3da
@mrsabath
Update PDF version
25f2bfc 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Synchronize with Google doc
7c498f3 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Add Table of Contents
9bf716d 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
Fix TOC
19dd43e 
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jcchavezs jcchavezs jcchavezs left review comments

@davidhadas davidhadas davidhadas left review comments

@y-tabata y-tabata y-tabata left review comments

@ashutosh-narkar ashutosh-narkar Awaiting requested review from ashutosh-narkar

@ragashreeshekar ragashreeshekar Awaiting requested review from ragashreeshekar

@ultrasaurus ultrasaurus Awaiting requested review from ultrasaurus

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet