Skip to content
This repository was archived by the owner on Dec 18, 2025. It is now read-only.

CNCF Zero Trust Whitepaper - #1229

Closed
mrsabath wants to merge 113 commits into
cncf:mainfrom
mrsabath:zero-trust-whitepaper
Closed

CNCF Zero Trust Whitepaper#1229
mrsabath wants to merge 113 commits into
cncf:mainfrom
mrsabath:zero-trust-whitepaper

Conversation

@mrsabath

@mrsabath mrsabath commented Feb 2, 2024

Copy link
Copy Markdown

This is an attempt to convert the CNCF Zero Trust Whitepaper to Markdown format as requested by the community.
The original document: https://docs.google.com/document/d/10g2390JdCBXmSmzQ_EGHFWrg2JosPsXLaqXaGQ-B9NA/edit?usp=sharing

CNCF issue: #950

This is still a draft. I just started the conversion and it requires more work and cleanup

@netlify

netlify Bot commented Feb 2, 2024

Copy link
Copy Markdown

Deploy Preview for tag-security ready!

Name Link
🔨 Latest commit 9167688
🔍 Latest deploy log https://app.netlify.com/sites/tag-security/deploys/66684029bda4d5000805f348
😎 Deploy Preview https://deploy-preview-1229--tag-security.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md
@PushkarJ

PushkarJ commented Feb 7, 2024

Copy link
Copy Markdown
Contributor

Thank you for opening the PR. @mrsabath as you make progress to make this "merge ready" please also address the linter, spellchecks and link checker output in the above CI checks

@PushkarJ PushkarJ mentioned this pull request Feb 8, 2024
9 tasks
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated

#### Data in Transit

To ensure all communications in-transit are encrypted, all services should be using TLS (at least a version 1.2), and all clients need to verify the certificates presented by the server. CNCF projects offering TLS and certificates to protect inter-service communication include [Istio](https://istio.io/), [Linkerd](https://linkerd.io/), [Dapr](https://dapr.io/), and [Knative](https://knative.dev/).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the recommendation for cipher suites as described in RFC9325 unnecessary?
It might be a good idea to just link to BCP195.

Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
@mrsabath

Copy link
Copy Markdown
Author

Thank you @y-tabata for your suggestions. The automation I used for converting from Doc to Markdown is not perfect and even though I did a lot of manual updates, there are still bugs that you were able to discover

Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
mrsabath and others added 10 commits March 27, 2024 10:42
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

- Basic Threat Landscape
- Secure Development Practices improved with status badges
- All-around fixes

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

community security pals credit

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Raghd Hamzeh <raghd@rhamzeh.com>
Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

fixed linting errors

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

spell, links and lint

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update lint-config.json

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update spelling-config.json

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

* Update self-assessment.md

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>

---------

Signed-off-by: Louis <119436047+lj365@users.noreply.github.com>
Co-authored-by: Raghd Hamzeh <raghd@rhamzeh.com>
Co-authored-by: Yoshiyuki Tabata <34849594+y-tabata@users.noreply.github.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath
mrsabath force-pushed the zero-trust-whitepaper branch from 4e48ac2 to 3bc18f8 Compare March 27, 2024 14:48
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Comment thread zero-trust-whitepaper/v1/cloud-native-zero-trust-whitepaper.md Outdated
mrsabath and others added 6 commits April 2, 2024 16:36
Co-authored-by: José Carlos Chávez <jcchavezs@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>

@anvega anvega left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this still a draft? This PR seems to contain work in progress. As per our established practices, we refrain from merging draft or incomplete work into the repository to avoid introducing outdated or inconsistent content. The existing markdown files you'll find represent the most recent, stable versions of their respective publications. So the work, whether in Markdown or PDF format, should be merged only after thorough review and completion.

During our chairs and tech leads discussion this morning, we acknowledged the need for comprehensive publishing guidelines to clarify the process and minimize confusion going forward. These guidelines will be documented and disseminated accordingly.

I appreciate the progress made so far on this effort. Given its current state, I recommend dedicating focused attention over the next two weeks to bring it to completion. Once finalized, we can proceed with merging the updates. To facilitate this, I will provide more detailed feedback on the tracking issue.

mrsabath added 2 commits June 11, 2024 08:14
Signed-off-by: Mariusz Sabath <mrsabath@gmail.com>
@mrsabath

mrsabath commented Jun 11, 2024

Copy link
Copy Markdown
Author

Is this still a draft? This PR seems to contain work in progress.

This work has been completed. We went through several stages and reviews. Several version of PDF were create. The latest one seems to be the most completed.

During our chairs and tech leads discussion this morning, we acknowledged the need for comprehensive publishing guidelines to clarify the process and minimize confusion going forward. These guidelines will be documented and disseminated accordingly.

I am in full agreement, and I would love to contribute to these guidelines, and provide my own suggestions and observations, as the process was long and challenging

I appreciate the progress made so far on this effort. Given its current state, I recommend dedicating focused attention over the next two weeks to bring it to completion. Once finalized, we can proceed with merging the updates. To facilitate this, I will provide more detailed feedback on the tracking issue.

Thank you for your feedback @anvega , let's close on the loose ends if any.

@eddie-knight

Copy link
Copy Markdown
Collaborator

I'm stepping in to help push this across the finish line, with the goal of completing all edits by Friday, June 21.

Community and TAG feedback is now being applied in a concerted push from myself and the lead authors.

No additional feedback will be accepted via this pull request.

@mrsabath mrsabath mentioned this pull request Oct 29, 2024
@jkjell

jkjell commented Oct 30, 2024

Copy link
Copy Markdown
Collaborator

Closing due to #1395 replacing this.

@jkjell jkjell closed this Oct 30, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.