From 63990daf4fb5a3dc1178f15d460bc3dc3d38c245 Mon Sep 17 00:00:00 2001 From: Jeyappragash JJ Date: Mon, 20 Aug 2018 17:57:52 -0700 Subject: [PATCH 1/3] Create safe.md --- workinggroups/safe.md | 52 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 52 insertions(+) create mode 100644 workinggroups/safe.md diff --git a/workinggroups/safe.md b/workinggroups/safe.md new file mode 100644 index 000000000..96c6b79ce --- /dev/null +++ b/workinggroups/safe.md @@ -0,0 +1,52 @@ + +# CNCF SAFE WG Proposal + +## TOC Sponsor + +Ken Owens + +## Objective + +Secure Access for Everyone (SAFE) Working Group will explore secure access, policy control and safety for operators, administrators, developers, and end-users across the cloud native ecosystem. + +## Goals and Expected Outcomes + +* Synthesize findings into white papers: + * Key Elements of a Trustworthy System + * Cloud Native Policy Architecture +* Publish artifacts from iterative, human-centered design process + * use cases with primary source references from cloud-native operators, administrators, developers + * references to documents from experts outside of the working group +* Develop Container Policy Interface implementations +* Provide feedback on proposed TOC projects related to SAFE +* Consider additional recommendations to CNCF TOC, such as: + * specifications that may be needed to address SAFE concerns + * project proposals needed to address gaps in the SAFE ecosystem + +## Non Goals + +* Choose a single identity or security technology +* Be a standards body for creating standards + +## Initial Interested Parties + +Dan Shaw (@dshaw) +Sarah Allen (@ultrasaurus) +Jeyappragash JJ (@pragashj) +Devarajan P Ramaswamy (@deva) +Kamil Pawlowski (@kbpawlowski) +Geri Jennings (@izgeri) +Howard Huang (@hannibalhuang) +Jason Melo (@jasonmelo) +Torin Sandall (@tsandall) +Sree Tummidi (@sreetummidi) +Christian Kemper (@ckemper67) +Ray Colline (@rcolline) +Doug Davis (@duglin) +Sabree Blackmon (@heavypackets) +Justin Cormack (@justincormack) +Liz Rice (@lizrice) +Erik St. Martin (@erikstmartin) +Cheney Hester (@quiqie) +Erica von Buelow (@ericavonb) +Mark Underwood (@knowlengr) From b3674071245208ee3ceb3b08296f4afc8d001bcd Mon Sep 17 00:00:00 2001 From: Sarah Allen Date: Mon, 20 May 2019 12:32:26 +0200 Subject: [PATCH 2/3] move file to new sig location --- workinggroups/safe.md => sigs/security.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename workinggroups/safe.md => sigs/security.md (100%) diff --git a/workinggroups/safe.md b/sigs/security.md similarity index 100% rename from workinggroups/safe.md rename to sigs/security.md From daccec2cc00b6cde3f368575dcafaa7b185f8e69 Mon Sep 17 00:00:00 2001 From: Sarah Allen Date: Mon, 20 May 2019 12:34:35 +0200 Subject: [PATCH 3/3] reference updated SIG-Security content --- sigs/security.md | 57 ++++++++++-------------------------------------- 1 file changed, 11 insertions(+), 46 deletions(-) diff --git a/sigs/security.md b/sigs/security.md index 96c6b79ce..1104bad01 100644 --- a/sigs/security.md +++ b/sigs/security.md @@ -1,52 +1,17 @@ +# CNCF SIG-Security: Special Interest Group on Security -# CNCF SAFE WG Proposal +* [Charter](https://github.com/cncf/sig-security/blob/master/governance/charter.md) - reviewed by and contributed to by Jeyappragash JJ, Sarah Allen, +Dan Shaw, Brandon Lum, with additional contributions by Alexis Richardson, +Quinton Hoole and members of SIG-Security (formerly known as SAFE WG), with +final review by Liz Rice, Joe Beda and Zhipeng Huang. +* [Current CNCF Projects](https://github.com/cncf/sig-security/blob/master/governance/cncf-projects.md) -## TOC Sponsor +# Roles -Ken Owens +**TOC Liaisons:** Liz Rice, Joe Beda -## Objective +**Co-Chairs:** Sarah Allen, Dan Shaw, Jeyappragash JJ -Secure Access for Everyone (SAFE) Working Group will explore secure access, policy control and safety for operators, administrators, developers, and end-users across the cloud native ecosystem. +**Tech Leads:** TBD (co-chairs to act as tech leads until at least two Technical Leads are identified, see [roles](https://github.com/cncf/sig-security/blob/master/governance/roles.md#role-of-chairs)) -## Goals and Expected Outcomes - -* Synthesize findings into white papers: - * Key Elements of a Trustworthy System - * Cloud Native Policy Architecture -* Publish artifacts from iterative, human-centered design process - * use cases with primary source references from cloud-native operators, administrators, developers - * references to documents from experts outside of the working group -* Develop Container Policy Interface implementations -* Provide feedback on proposed TOC projects related to SAFE -* Consider additional recommendations to CNCF TOC, such as: - * specifications that may be needed to address SAFE concerns - * project proposals needed to address gaps in the SAFE ecosystem - -## Non Goals - -* Choose a single identity or security technology -* Be a standards body for creating standards - -## Initial Interested Parties - -Dan Shaw (@dshaw) -Sarah Allen (@ultrasaurus) -Jeyappragash JJ (@pragashj) -Devarajan P Ramaswamy (@deva) -Kamil Pawlowski (@kbpawlowski) -Geri Jennings (@izgeri) -Howard Huang (@hannibalhuang) -Jason Melo (@jasonmelo) -Torin Sandall (@tsandall) -Sree Tummidi (@sreetummidi) -Christian Kemper (@ckemper67) -Ray Colline (@rcolline) -Doug Davis (@duglin) -Sabree Blackmon (@heavypackets) -Justin Cormack (@justincormack) -Liz Rice (@lizrice) -Erik St. Martin (@erikstmartin) -Cheney Hester (@quiqie) -Erica von Buelow (@ericavonb) -Mark Underwood (@knowlengr) +For complete details on process and elaboration of rules, see [SIG-Security governance](https://github.com/cncf/sig-security/tree/master/governance)