cncf-toc@lists.cncf.io

Home Messages Hashtags Subgroups

Messages

Topics Expanded Polls

Export Group Data

Between

and

Re: landscape, spiffe, opa, vault

anyone else want to chip in?

By alexis richardson · #1375 ·

Re: landscape, spiffe, opa, vault

I've been reading it this morning. I think SPIFFE/SPIRE, OPA, and Vault fit nicely within that framing. Frankly, I think proxies fit within the AAA category, too. Maybe we're even talking about "AAA"

By Sunil James <sunil@...> · #1374 ·

Re: landscape, spiffe, opa, vault

I am ok with that. Wonder what others think? Is that an offer? ;-) a

By alexis richardson · #1373 ·

Re: landscape, spiffe, opa, vault

Tough one, but I'd say "yes." FWIW, we should probably read through RFC 2989 (specifically the agreed-upon terminology) for historical context. --- SJ | sunil@... | Scytale & SPIFFE

By Sunil James <sunil@...> · #1372 ·

Re: landscape, spiffe, opa, vault

would you suggest moving key management to AAA?

By alexis richardson · #1371 ·

Re: landscape, spiffe, opa, vault

+1 to this framing, particularly to its cross-cutting nature. While I agree 'security' is a natural starting bucket, the value propositions these (and other) projects address go beyond this (over

By Sunil James <sunil@...> · #1370 ·

Re: landscape, spiffe, opa, vault

+1 to the Authentication (SPIFFE, spire), Authorization (OPA), Audit (?). Classically these are part of Security, but there's no box for that. AAA is typically cross-cutting. OPA, for example, has

By Tim Hinrichs · #1369 ·

Re: landscape, spiffe, opa, vault

Similar functions have often been classified as "AAA" in traditional systems (Authentication, Authorization, Accounting). I agree that no box really captures these well today - the closest are likely

By Guru Chahal <guru@...> · #1368 ·

Re: landscape, spiffe, opa, vault

That was where I was going... Do others agree?

By alexis richardson · #1367 ·

Re: landscape, spiffe, opa, vault

I think OPA belongs in the top layer but I don't think it fits in any of the existing subcategories. In fact I feel that way about all three. ---- Nick

By Nick Chase · #1366 ·

landscape, spiffe, opa, vault

All, Question about the landscape. https://raw.githubusercontent.com/cncf/landscape/master/landscape/CloudNativeLandscape_latest.jpg - do we want to put OPA in the top layer, either inside, or next to

By alexis richardson · #1365 ·

Re: SPIFFE Presentation - TOC Agenda 11/7/2017

Thanks Andrew, I really appreciate your detail answers to my questions I raised earlier. Let me digest all these details and get back to you in case I need more clarity etc. In the meanwhile, thanks

By Deepak Vij (A) <deepak.vij@...> · #1364 ·

Open Policy Agent

Hello! Here are extra materials that were requested on the call. You can find out more about OPA at openpolicyagent.org. We have a number of tutorials with examples across Kubernetes, Terraform, SSH,

By Torin Sandall · #1363 ·

Re: SPIFFE Presentation - TOC Agenda 11/7/2017

Hi Deepak - great to hear from you! Some answers to your questions inline. Istio has implemented the X.509-SVID as its identity token. This is part of the SPIFFE specification. We’re working

By Andrew Jessup <andrew@...> · #1362 ·

Re: CNCF TOC - F2F in Austin

we'll find something for folks who want to take the call F2F too, thanks for the reminder -- Chris Aniszczyk (@cra) | +1-512-961-6719

By Chris Aniszczyk · #1361 ·

Re: CNCF TOC - F2F in Austin

by the same token: do we have a location booked for TOC call on Tuesday Dec 5?

By alexis richardson · #1360 ·

Re: CNCF TOC - F2F in Austin

thanks!

By alexis richardson · #1359 ·

Re: CNCF TOC - F2F in Austin

I’ll get it on the calendar, the public meeting is on the KubeCon schedule: http://sched.co/Cr9w I’ll give an update on meeting times on the TOC call later today.

By Chris Aniszczyk · #1358 ·

CNCF TOC - F2F in Austin

Dan & Chris What was the final decision for the TOC's F2F in Austin? Please could you ask whoever manages the LF cal to get it into everyone's diary? a

By alexis richardson · #1357 ·

TOC Agenda 11/14/2017

Hey all, we have a TOC meeting tomorrow, here's the agenda deck: https://goo.gl/vKbawR We will be hearing from the Open Policy Agent (OPA) project, along with getting updates from the Storage,

By Chris Aniszczyk · #1356 ·

6621 - 6640 of 7995

Home Hashtags Subgroups Terms