Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

observability #1449

Closed
wants to merge 7 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
4 changes: 4 additions & 0 deletions docusaurus.config.js
Original file line number Diff line number Diff line change
Expand Up @@ -173,6 +173,10 @@ const config = {
label: 'Microsegmentation',
to: '/use-cases/microsegmentation',
},
{
label: 'Observability',
to: '/use-cases/observability',
},
],
},
{
Expand Down
1 change: 1 addition & 0 deletions sidebars-use-cases.js
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ module.exports = {
collapsed: false,
items: [
'microsegmentation',
'observability'
],
},
],
Expand Down
Binary file added static/img/use-cases/cluster-health.png
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/use-cases/flowviz.png
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/use-cases/kibana-dns-dashboard.png
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/use-cases/kibana-logs.png
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/use-cases/policy-board.png
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/use-cases/service-graph.png
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
10 changes: 5 additions & 5 deletions use-cases/microsegmentation.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -196,16 +196,16 @@ By verifying that correct flows are allowed and denied before enforcement, you c
To implement microsegmentation, you should follow a structured and repeatable approach to increase the likelihood of success.
These can be summarized as four broad steps:

1. [Identify the security domains](./microsegmentation#identification-of-security-domains) for which microsegmentation will be enforced, who will be responsible for them, and who or which services need access to those security domains.
1. [Identify the security domains](./microsegmentation#identify-your-security-domains) for which microsegmentation will be enforced, who will be responsible for them, and who or which services need access to those security domains.

2. [Define a policy](./microsegmentation#developing-policy-framework) model using documented microservice communication for your applications or by analyzing traffic flows.
2. [Define a policy](./microsegmentation#develop-a-policy-framework) model using documented microservice communication for your applications or by analyzing traffic flows.
When defining policies you should also consider the scope of the policies (global or namespace), who will be writing and applying the policies, and policy order (or tiers).

3. [Author and deploy network policies](./microsegmentation#deploy-security-policies).
Once all the correct allow policies are in place, stage a [default deny policy](./microsegmentation#enforce-default-deny).
3. [Author and deploy network policies](./microsegmentation#deploy-network-policies).
Once all the correct allow policies are in place, stage a [default deny policy](./microsegmentation#enforce-a-default-deny-policy).
You may want to identify a low-impact application or security domain first to understand and evaluate the process before prioritizing segmentation of critical security domains.

4. [Re-assess any flows](./microsegmentation#monitor-review-refine) or new applications that may require policy remediation before enforcing a default-deny.
4. [Re-assess any flows](./microsegmentation#monitor-and-fine-tune-your-policies) or new applications that may require policy remediation before enforcing a default-deny.
In Calico Open Source, where staged policies are not supported, enforce a default deny in a staging environment to correct any policies prior to enforcing in production.

### Identify your security domains
Expand Down
426 changes: 426 additions & 0 deletions use-cases/observability.mdx

Large diffs are not rendered by default.