From 550a69699f720b41cc904445fcacda730075095e Mon Sep 17 00:00:00 2001 From: Carl Bourne Date: Sat, 16 Mar 2024 16:43:00 +0000 Subject: [PATCH] added diagram to docs --- .DS_Store | Bin 8196 -> 8196 bytes .env | 2 +- demo.ipynb | 30 +- docs/.DS_Store | Bin 6148 -> 6148 bytes docs/images/.DS_Store | Bin 0 -> 6148 bytes docs/images/firefly-tlspc-architecture.svg | 749 +++++++++++++++++++++ docs/index.md | 5 + 7 files changed, 766 insertions(+), 20 deletions(-) create mode 100644 docs/images/.DS_Store create mode 100644 docs/images/firefly-tlspc-architecture.svg diff --git a/.DS_Store b/.DS_Store index 409ca02e896e181ed63150a26f80b04d2da9d1f9..e81684d04445affbdb40755ab7015e485ebcf9e6 100644 GIT binary patch delta 52 zcmZp1XmQwJBQRNAu#CgN*iuKq%)oN;QbEVbKLwU>7#o}EC>Wa>Y+fpuz_yuP;ycUc IKO$_*0Hy8_4*&oF delta 91 zcmZp1XmQwJBfz+GvaLX&hGccMk(sfMf{B?$t&T#qp^2rXj)IxFS#2#Rhp4i?bx?eE vPHtX)_v9M_@{B!`e+Vq+Ffj!xF*Y)qyi34w^9w(KUp@3vM~by+VUG_ diff --git a/.env b/.env index 7b3a6fd..9837e09 100644 --- a/.env +++ b/.env @@ -1,2 +1,2 @@ TLSPC_API_KEY={PASTE API KEY} -VTOKEN=XXXXXXXXXXX +VTOKEN= diff --git a/demo.ipynb b/demo.ipynb index 6f349cf..cc5ea50 100644 --- a/demo.ipynb +++ b/demo.ipynb @@ -67,7 +67,7 @@ }, { "cell_type": "code", - "execution_count": 3, + "execution_count": 4, "metadata": { "vscode": { "languageId": "shellscript" @@ -78,24 +78,15 @@ "name": "stdout", "output_type": "stream", "text": [ - "eyJhbGciOiJFUzI1NiIsImtpZCI6Ikg2aENHR3hlZnRmRDBPZlhfLXA0aWVmOWRLQlFzM1dXTEFVaVlQQWlIWGMiLCJ0eXAiOiJKV1QifQ.eyJleHAiOjE3MTA2MDA4NzcsImlhdCI6MTcxMDUxNDQ3NywiaXNzIjoiaHR0cDovLzE3Mi4yMC4wLjI6ODAwMCIsInN1YiI6Imp3dC10aGlzIiwidmVuYWZpLWZpcmVmbHkuYWxsb3dBbGxQb2xpY2llcyI6ZmFsc2UsInZlbmFmaS1maXJlZmx5LmFsbG93ZWRQb2xpY2llcyI6WyJCYXNpYyBEZW1vIl0sInZlbmFmaS1maXJlZmx5LmNvbmZpZ3VyYXRpb24iOiJCYXNpYyBEZW1vIn0.Hg7rBLvXGhb2_RTUPwLoVf_WZ7EiT2ByiULVzB2OoQPXv1ocTriHNTRdRgA7mob0V_NiWZlI_EzokNkRCCcsGQ\n", - "\u001b[1;39m{\n", - " \u001b[0m\u001b[1;34m\"alg\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"ES256\"\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"kid\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"H6hCGGxeftfD0OfX_-p4ief9dKBQs3WWLAUiYPAiHXc\"\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"typ\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"JWT\"\u001b[0m\u001b[1;39m\n", - "\u001b[1;39m}\u001b[0m\n", - "\u001b[1;39m{\n", - " \u001b[0m\u001b[1;34m\"exp\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;39m1710600877\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"iat\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;39m1710514477\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"iss\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"http://172.20.0.2:8000\"\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"sub\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"jwt-this\"\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"venafi-firefly.allowAllPolicies\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;39mfalse\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"venafi-firefly.allowedPolicies\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[1;39m[\n", - " \u001b[0;32m\"Basic Demo\"\u001b[0m\u001b[1;39m\n", - " \u001b[1;39m]\u001b[0m\u001b[1;39m,\n", - " \u001b[0m\u001b[1;34m\"venafi-firefly.configuration\"\u001b[0m\u001b[1;39m: \u001b[0m\u001b[0;32m\"Basic Demo\"\u001b[0m\u001b[1;39m\n", - "\u001b[1;39m}\u001b[0m\n" + "\n", + "jq: error (at :1): Malformed BOM (while parsing '��')\n" ] + }, + { + "ename": "", + "evalue": "5", + "output_type": "error", + "traceback": [] } ], "source": [ @@ -105,7 +96,8 @@ " -X POST http://localhost:8000/token \\\n", " -k -s | jq -r '.access_token' )\n", "# Update the variable in the Docker Compose .env file \n", - "sed -i '' 's/^\\(VTOKEN=\\).*/\\VTOKEN='\"$token\"'/' .env \n", + "#sed -i '' 's/^\\(VTOKEN=\\).*/\\VTOKEN='\"$token\"'/' .env \n", + "echo VTOKEN=$token >> .env\n", "echo ${token}\n", "echo ${token} | jq -R 'split(\".\") | .[0],.[1] | @base64d | fromjson'\n" ] diff --git a/docs/.DS_Store b/docs/.DS_Store index e0abb321e4fb2840efb9f8ce4599f0972d276de6..8c50dd4d429431010a88bf9674286512e62d8239 100644 GIT binary patch delta 219 zcmZoMXfc=|#>B!ku~2NHo+2aX#(>?7i#IScF>+4kVUlLtJz0aPP)oYH+R(t*Qb)ne zz_M0Hq1w>Y+*n7!(7?>Bww9AaR9W9TC_XzUH!r_;@Yq(;O783ee*)*@640=MI1R885o#= M3K=#>h^%1-03gaZKL7v# delta 124 zcmZoMXfc=|#>B)qu~2NHo+2ar#(>?7jO>$nSfm+uPTs>>s3BQhZDeMwqhMlYQLCd+ zZD?X?siR + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Container-Playground + + + Background + + Rectangle + + + + + items + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + - Ephemeral SubCA + - Private Key - In memory + - Rooted to enterprise CA + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Secure + Memory + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Text + + CA + + + + + + + Ephemeral Issuers + + + + + Platform Engineering + Teams + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Container Runtime + e.g. Docker, Podman … + + + + + Firefly outbound only: + + + + + + + + + + + + + JWT-This + Development IDP + + + + + + + + + + + + Docker Compose + + + + + + + + + + + + + MANAGEMENT + + + + + + POLICY + &CONFIG + + + + + + SIGNING REQUESTS + & METRICS + + + + + + + + + + + + + + + + + + + + + + + + + NGINX + + + + + + + + + + + + + + + + + + + + + VCert + + + + + + + + Host Filesystem + + + + + + + Shape + + + + + + VCert + + + + Shape + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Text + + TLS + + + + + + Container Filesystem + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + CSR + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Text + + TLS + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ZTPKI + + + + + + apps + + + Volume Mount + + + + + Infosec-TLSPD + + + InfoSec/Operational + Security Teams + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Using Firefly with TLS Protect Cloud + + + + + + + + + + + MANAGEMENT + + + + + + + + + + + AUTOMATION + + + + + diff --git a/docs/index.md b/docs/index.md index ceb4cec..fbd6f91 100644 --- a/docs/index.md +++ b/docs/index.md @@ -12,6 +12,11 @@ This quick-start playground is intended to showcase Venafi's {{ component_name } For simplicity the demo will use a built in certificate authority CA provided by as part of the Venafi Cloud service. +### Architecture + +The following diagram provides a high level architectural overview that shows the outcome of what we will be building: + +![alt text](images/firefly-tlspc-architecture.svg) ### Prerequisites