diff --git a/.DS_Store b/.DS_Store index 409ca02..e81684d 100644 Binary files a/.DS_Store and b/.DS_Store differ diff --git a/.env b/.env index 7b3a6fd..9837e09 100644 --- a/.env +++ b/.env @@ -1,2 +1,2 @@ TLSPC_API_KEY={PASTE API KEY} -VTOKEN=XXXXXXXXXXX +VTOKEN= diff --git a/demo.ipynb b/demo.ipynb index 6f349cf..cc5ea50 100644 --- a/demo.ipynb +++ b/demo.ipynb @@ -67,7 +67,7 @@ }, { "cell_type": "code", - "execution_count": 3, + "execution_count": 4, "metadata": { "vscode": { "languageId": "shellscript" @@ -78,24 +78,15 @@ "name": "stdout", "output_type": "stream", "text": [ - "eyJhbGciOiJFUzI1NiIsImtpZCI6Ikg2aENHR3hlZnRmRDBPZlhfLXA0aWVmOWRLQlFzM1dXTEFVaVlQQWlIWGMiLCJ0eXAiOiJKV1QifQ.eyJleHAiOjE3MTA2MDA4NzcsImlhdCI6MTcxMDUxNDQ3NywiaXNzIjoiaHR0cDovLzE3Mi4yMC4wLjI6ODAwMCIsInN1YiI6Imp3dC10aGlzIiwidmVuYWZpLWZpcmVmbHkuYWxsb3dBbGxQb2xpY2llcyI6ZmFsc2UsInZlbmFmaS1maXJlZmx5LmFsbG93ZWRQb2xpY2llcyI6WyJCYXNpYyBEZW1vIl0sInZlbmFmaS1maXJlZmx5LmNvbmZpZ3VyYXRpb24iOiJCYXNpYyBEZW1vIn0.Hg7rBLvXGhb2_RTUPwLoVf_WZ7EiT2ByiULVzB2OoQPXv1ocTriHNTRdRgA7mob0V_NiWZlI_EzokNkRCCcsGQ\n", - "\u001b[1;39m{\n", - " \u001b[0m\u001b[1;34m\"alg\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"ES256\"\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"kid\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"H6hCGGxeftfD0OfX_-p4ief9dKBQs3WWLAUiYPAiHXc\"\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"typ\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"JWT\"\u001b[0m\u001b[1;39m\n", - "\u001b[1;39m}\u001b[0m\n", - "\u001b[1;39m{\n", - " \u001b[0m\u001b[1;34m\"exp\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;39m1710600877\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"iat\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;39m1710514477\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"iss\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"http://172.20.0.2:8000\"\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"sub\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"jwt-this\"\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"venafi-firefly.allowAllPolicies\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;39mfalse\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"venafi-firefly.allowedPolicies\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[1;39m[\n", - " \u001b[0;32m\"Basic Demo\"\u001b[0m\u001b[1;39m\n", - " \u001b[1;39m]\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"venafi-firefly.configuration\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"Basic Demo\"\u001b[0m\u001b[1;39m\n", - "\u001b[1;39m}\u001b[0m\n" + "\n", + "jq: error (at :1): Malformed BOM (while parsing '��')\n" ] + }, + { + "ename": "", + "evalue": "5", + "output_type": "error", + "traceback": [] } ], "source": [ @@ -105,7 +96,8 @@ " -X POST http://localhost:8000/token \\\n", " -k -s | jq -r '.access_token' )\n", "# Update the variable in the Docker Compose .env file \n", - "sed -i '' 's/^\\(VTOKEN=\\).*/\\VTOKEN='\"$token\"'/' .env \n", + "#sed -i '' 's/^\\(VTOKEN=\\).*/\\VTOKEN='\"$token\"'/' .env \n", + "echo VTOKEN=$token >> .env\n", "echo ${token}\n", "echo ${token} | jq -R 'split(\".\") | .[0],.[1] | @base64d | fromjson'\n" ] diff --git a/docs/.DS_Store b/docs/.DS_Store index e0abb32..8c50dd4 100644 Binary files a/docs/.DS_Store and b/docs/.DS_Store differ diff --git a/docs/images/.DS_Store b/docs/images/.DS_Store new file mode 100644 index 0000000..1eb03bd Binary files /dev/null and b/docs/images/.DS_Store differ diff --git a/docs/images/firefly-tlspc-architecture.svg b/docs/images/firefly-tlspc-architecture.svg new file mode 100644 index 0000000..81427fa --- /dev/null +++ b/docs/images/firefly-tlspc-architecture.svg @@ -0,0 +1,749 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Container-Playground + + + Background + + Rectangle + + + + + items + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + - Ephemeral SubCA + - Private Key - In memory + - Rooted to enterprise CA + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Secure + Memory + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Text + + CA + + + + + + + Ephemeral Issuers + + + + + Platform Engineering + Teams + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Container Runtime + e.g. Docker, Podman … + + + + + Firefly outbound only: + + + + + + + + + + + + + JWT-This + Development IDP + + + + + + + + + + + + Docker Compose + + + + + + + + + + + + + MANAGEMENT + + + + + + POLICY + &CONFIG + + + + + + SIGNING REQUESTS + & METRICS + + + + + + + + + + + + + + + + + + + + + + + + + NGINX + + + + + + + + + + + + + + + + + + + + + VCert + + + + + + + + Host Filesystem + + + + + + + Shape + + + + + + VCert + + + + Shape + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Text + + TLS + + + + + + Container Filesystem + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + CSR + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Text + + TLS + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ZTPKI + + + + + + apps + + + Volume Mount + + + + + Infosec-TLSPD + + + InfoSec/Operational + Security Teams + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Using Firefly with TLS Protect Cloud + + + + + + + + + + + MANAGEMENT + + + + + + + + + + + AUTOMATION + + + + + diff --git a/docs/index.md b/docs/index.md index ceb4cec..fbd6f91 100644 --- a/docs/index.md +++ b/docs/index.md @@ -12,6 +12,11 @@ This quick-start playground is intended to showcase Venafi's {{ component_name } For simplicity the demo will use a built in certificate authority CA provided by as part of the Venafi Cloud service. +### Architecture + +The following diagram provides a high level architectural overview that shows the outcome of what we will be building: + +![alt text](images/firefly-tlspc-architecture.svg) ### Prerequisites