From 6426c5aaf75bcb761b27ca415cf5736631a72f85 Mon Sep 17 00:00:00 2001 From: Jon Schulman <25127543+jonnyborbs@users.noreply.github.com> Date: Thu, 12 Dec 2024 12:54:20 -0800 Subject: [PATCH 1/7] =?UTF-8?q?chore:=20update=20README=20to=20explicitly?= =?UTF-8?q?=20indicate=20the=20need=20for=20a=20running=20co=E2=80=A6=20(#?= =?UTF-8?q?1113)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Chore: Adding an explicit callout in `README.md` that a running container environment is required for K3D to interact with. Most folks won't need this said. Those who do will definitely benefit from the addition. --------- Co-authored-by: Micah Nagel --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 0651d6808..98b351f0e 100644 --- a/README.md +++ b/README.md @@ -33,6 +33,7 @@ UDS Core establishes a secure baseline for cloud-native systems and ships with c ### Prerequisites +- A running container environment for K3D to interact with for dev & test environments - [K3D](https://k3d.io/) for dev & test environments or any [CNCF Certified Kubernetes Cluster](https://www.cncf.io/training/certification/software-conformance/#logos) for production environments. - [UDS CLI](https://github.com/defenseunicorns/uds-cli?tab=readme-ov-file#install) v0.8.1 or later From bcb8848d92f5c7825ffd0b96a21e27ed106a9c1f Mon Sep 17 00:00:00 2001 From: Noah <40781376+noahpb@users.noreply.github.com> Date: Fri, 13 Dec 2024 12:22:05 -0500 Subject: [PATCH 2/7] =?UTF-8?q?chore:=20bump=20aks=20sku=20from=20free=20t?= =?UTF-8?q?o=20standard=20to=20address=20API=20server=20perfo=E2=80=A6=20(?= =?UTF-8?q?#1121)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## Description We've been seeing consistent nightly ci failures on AKS that suggest that the API server is a bottleneck to uds-core deployment. From @mjnagel: - https://github.com/defenseunicorns/uds-core/actions/runs/12310537338/job/34359271873#step:11:320: no error message but failed to reconcile authservice :thonk: - https://github.com/defenseunicorns/uds-core/actions/runs/12290831792/job/34298610444#step:11:292: doesn't look like pepr picked up prometheus - https://github.com/defenseunicorns/uds-core/actions/runs/12308571271/job/34354169433?pr=1117#step:11:304: Failed to apply network policies ([this](https://github.com/defenseunicorns/uds-core/blob/6426c5aaf75bcb761b27ca415cf5736631a72f85/src/pepr/operator/controllers/network/policies.ts#L155) is where that error comes from) - https://github.com/defenseunicorns/uds-core/actions/runs/12308571271/job/34354169733?pr=1117#step:11:360: more netpol failures + token failure This PR bumps the cluster SKU from `Free` to `Standard` as there are inflight request [limits](https://learn.microsoft.com/en-us/azure/aks/quotas-skus-regions#:~:text=server/etcd%20instances.-,Free%20tier,-Limited%20resources%20with) for `Free` tier clusters. ## Related Issue Fixes # Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Steps to Validate N/A ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --- .github/test-infra/azure/aks/variables.tf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/test-infra/azure/aks/variables.tf b/.github/test-infra/azure/aks/variables.tf index 08acdc0cb..a4f09b6da 100644 --- a/.github/test-infra/azure/aks/variables.tf +++ b/.github/test-infra/azure/aks/variables.tf @@ -24,12 +24,12 @@ variable "dns_prefix" { } variable "sku_tier" { - description = "(Optional) The SKU Tier that should be used for this Kubernetes Cluster. Possible values are Free and Paid (which includes the Uptime SLA). Defaults to Free." - default = "Free" + description = "(Optional) The SKU Tier that should be used for this Kubernetes Cluster. Possible values are Free and Standard (which includes the Uptime SLA), and Premium. Defaults to Free." + default = "Standard" type = string validation { - condition = contains(["Free", "Paid"], var.sku_tier) + condition = contains(["Free", "Standard", "Premium"], var.sku_tier) error_message = "The sku tier is invalid." } } From e8a1beb0b8ee01d033d8c85c4993becda834ede5 Mon Sep 17 00:00:00 2001 From: Chance <139784371+UnicornChance@users.noreply.github.com> Date: Fri, 13 Dec 2024 11:13:10 -0700 Subject: [PATCH 3/7] chore: update arch diagrams (#1120) ## Description Not much changed between updates, just some cleanup and clearer naming practices. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --- README.md | 5 +++++ docs/.images/README.md | 22 +++++++++++++++++++ docs/.images/uds-core-arch-ingress-egress.svg | 3 +-- docs/.images/uds-core-arch-overview.svg | 3 +-- .../.images/uds-core-arch-ports-protocols.svg | 3 +-- 5 files changed, 30 insertions(+), 6 deletions(-) create mode 100644 docs/.images/README.md diff --git a/README.md b/README.md index 98b351f0e..521393d4d 100644 --- a/README.md +++ b/README.md @@ -113,3 +113,8 @@ uds run test-single-layer --set LAYER=identity-authorization ``` Note you can specify the `--set FLAVOR=registry1` flag to test using Iron Bank images instead of the upstream images. + +## UDS Core Architecture Overview +![UDS Core Architecture Diagram](https://github.com/defenseunicorns/uds-core/blob/main/docs/.images/uds-core-arch-overview.svg?raw=true) + +Diagrams are located in `/docs/.images`. See the [diagram README](./docs/.images/README.md) for an explanation and help customizing. diff --git a/docs/.images/README.md b/docs/.images/README.md new file mode 100644 index 000000000..62a2ca174 --- /dev/null +++ b/docs/.images/README.md @@ -0,0 +1,22 @@ +# UDS Core Diagrams + +## Diagram Explanations +At this time there are three layers to our diagram that visually explain the following: + +1. `Overview`, basic view of what applications are present and what other services/applications they are communicating with. + +2. `Traffic Direction`, similar to `Overview` layer with the addition of directional arrows to represent the flow of traffic in cluster. + +3. `Ports and Protocols`, similar to `Traffic Direction` layer with the addition of ports and protocols. + +## How to Customize +To customize the diagram, download the svg and in [draw.io](https://draw.io) create a new diagram and load in the svg. + +To download the [svg from github](https://github.com/defenseunicorns/uds-core/tree/main/docs/.images), select one of the svg files, then select the download button in the top right of the `Preview` view. + +Alternatively you can also download the svg from the [uds.defenseunicorns.com](https://uds.defenseunicorns.com/reference/uds-core/overview/) docsite by right clicking and selecting the `Save image as` option. + +It doesn't matter which svg you download, they all contain the metadata for the other layers mentioned above (you may need to enable the layers pop up in [draw.io](https://draw.io) to change your layer). + + +#### If you have suggestions for the diagrams, we welcome issues or pull requests contributions to [uds-core](https://github.com/defenseunicorns/uds-core). diff --git a/docs/.images/uds-core-arch-ingress-egress.svg b/docs/.images/uds-core-arch-ingress-egress.svg index e6de03bed..921851c6d 100644 --- a/docs/.images/uds-core-arch-ingress-egress.svg +++ b/docs/.images/uds-core-arch-ingress-egress.svg @@ -1,4 +1,3 @@ - -
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22300%22%20y%3D%2268%22%20width%3D%22320%22%20height%3D%22382%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%223%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%222%22%3E%3CmxGeometry%20width%3D%22320%22%20height%3D%22330%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%224%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23f5f5f5%3BfontColor%3D%23333333%3BstrokeColor%3D%23666666%3BarcSize%3D9%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20y%3D%2220.5%22%20width%3D%22310%22%20height%3D%22309.5%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%225%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22114.21052631578947%22%20width%3D%2281.57894736842105%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%226%22%20value%3D%22pepr-system%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D1%3Bshadow%3D0%3BlabelBorderColor%3Dnone%3BfontSize%3D14%3BfontColor%3D%23000000%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2265.26315789473684%22%20y%3D%2242%22%20width%3D%22179.4736842105263%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%227%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%20target%3D%224%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%228%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%22160%22%20y%3D%22119.66666666666674%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%229%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473682%22%20y%3D%22180%22%20width%3D%22104.47631578947372%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2210%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2211%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Admission%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20x%3D%2245.739473684210566%22%20y%3D%224.670000000000016%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2212%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473684%22%20y%3D%22100%22%20width%3D%22104.47631578947369%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2213%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Watcher%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20x%3D%2245.73947368421053%22%20y%3D%224.670000000000002%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2214%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2215%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Validating%20Webhook%26lt%3B%2Ffont%26gt%3B%26lt%3Bdiv%26gt%3B%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3B%26lt%3Bbr%26gt%3B%26lt%3B%2Ffont%26gt%3B%26lt%3B%2Fdiv%26gt%3B%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dapi%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22270%22%20y%3D%2233%22%20width%3D%2250%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Kubernetes Control Plane
Pepr Mutating Webhook
Pepr Validating Webhook

API Server
Zarf Mutating Webhook
Istio Mutating Webhook
ns
istio-tenant-gateway
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Tenant Ingress Gateway 
LoadBalancer
Istio Ingress Gateway
External
LoadBalancer
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
ns
authservice
AuthService
ns
istio-admin-gateway
svc
Admin Ingress Gateway LoadBalancer
Istio Ingress Gateway
External
LoadBalancer
ns
grafana
Grafana
ns
keycloak
Keycloak
loki
Loki Backend
Loki Gateway
Loki Read
Loki Write
ns
ns
vector
Vector
ns
zarf
Zarf Agent
Zarf Registry
pepr-system
ns
Pepr Watcher
Pepr Admission
ns
monitoring
Kube State Metrics
Node Exporter
Prometheus
Alertmanager
Prometheus Operator
ns
velero
Velero
ns
generic customer namespace
customer application
End User
neuvector
ns
NeuVector Manager
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221625%22%20y%3D%22230%22%20width%3D%2273.68%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
NeuVector Controller
NeuVector Enforcer
NeuVector Scanner
IP Allowlist
Cluster Administrator
ns
istio-system
istiod
Legend
Pod
Kubernetes Cluster
Internal LoadBalancer
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
External LoadBalancer
ns
Namespace
Network Firewall
Cloud Computing
External Database
External SIEM Tool
External Storage
Egress Traffic
Bidirectional Traffic
Ingress Traffic
Kubelet
\ No newline at end of file +
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22300%22%20y%3D%2268%22%20width%3D%22320%22%20height%3D%22382%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%223%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%222%22%3E%3CmxGeometry%20width%3D%22320%22%20height%3D%22330%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%224%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23f5f5f5%3BfontColor%3D%23333333%3BstrokeColor%3D%23666666%3BarcSize%3D9%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20y%3D%2220.5%22%20width%3D%22310%22%20height%3D%22309.5%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%225%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22114.21052631578947%22%20width%3D%2281.57894736842105%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%226%22%20value%3D%22pepr-system%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D1%3Bshadow%3D0%3BlabelBorderColor%3Dnone%3BfontSize%3D14%3BfontColor%3D%23000000%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2265.26315789473684%22%20y%3D%2242%22%20width%3D%22179.4736842105263%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%227%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%20target%3D%224%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%228%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%22160%22%20y%3D%22119.66666666666674%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%229%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473682%22%20y%3D%22180%22%20width%3D%22104.47631578947372%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2210%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2211%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Admission%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20x%3D%2245.739473684210566%22%20y%3D%224.670000000000016%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2212%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473684%22%20y%3D%22100%22%20width%3D%22104.47631578947369%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2213%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Watcher%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20x%3D%2245.73947368421053%22%20y%3D%224.670000000000002%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2214%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2215%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Validating%20Webhook%26lt%3B%2Ffont%26gt%3B%26lt%3Bdiv%26gt%3B%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3B%26lt%3Bbr%26gt%3B%26lt%3B%2Ffont%26gt%3B%26lt%3B%2Fdiv%26gt%3B%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dapi%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22270%22%20y%3D%2233%22%20width%3D%2250%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Kubernetes Control Plane
Pepr Mutating Webhook
Pepr Validating Webhook

API Server
Zarf Mutating Webhook
Istio Mutating Webhook
ns
Kubernetes 
istio-tenant-gateway
Namespace
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Tenant Ingress Gateway 
LoadBalancer
Istio Ingress Gateway
External
LoadBalancer
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Kubernetes Cluster
ns
Kubernetes grafana Namespace
Grafana
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
ns
Kubernetes authservice Namespace
AuthService
ns
Kubernetes
istio-admin-gateway
Namespace
svc
Admin Ingress Gateway LoadBalancer
Istio Ingress Gateway
External
LoadBalancer
ns
Kubernetes keycloak Namespace
Keycloak
Kubernetes loki Namespace
Loki Backend
Loki Gateway
Loki Read
Loki Write
ns
ns
Kubernetes vector Namespace
Vector
ns
Kubernetes zarf Namespace
Zarf Agent
Zarf Registry
Kubernetes pepr-system Namespace
ns
Pepr Watcher
Pepr Admission
ns
Kubernetes monitoring Namespace
Kube State Metrics
Node Exporter
Prometheus
Alertmanager
Prometheus Operator
ns
Kubernetes velero Namespace
Velero
ns
generic customer namespace
customer application
End User
Kubernetes neuvector Namespace
ns
NeuVector Manager
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221625%22%20y%3D%22230%22%20width%3D%2273.68%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
NeuVector Controller
NeuVector Enforcer
NeuVector Scanner
IP Allowlist
Cluster Administrator
ns
Kubernetes istio-system Namespace
istiod
Legend
Pod
Kubernetes Cluster
Internal LoadBalancer
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
External LoadBalancer
ns
Namespace
Network Firewall
Cloud Computing
External Database
External SIEM Tool
External Storage
Egress Traffic
Bidirectional Traffic
Ingress Traffic
Kubelet
\ No newline at end of file diff --git a/docs/.images/uds-core-arch-overview.svg b/docs/.images/uds-core-arch-overview.svg index ae71a237d..a57fe7ffa 100644 --- a/docs/.images/uds-core-arch-overview.svg +++ b/docs/.images/uds-core-arch-overview.svg @@ -1,4 +1,3 @@ - -
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22300%22%20y%3D%2268%22%20width%3D%22320%22%20height%3D%22382%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%223%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%222%22%3E%3CmxGeometry%20width%3D%22320%22%20height%3D%22330%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%224%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23f5f5f5%3BfontColor%3D%23333333%3BstrokeColor%3D%23666666%3BarcSize%3D9%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20y%3D%2220.5%22%20width%3D%22310%22%20height%3D%22309.5%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%225%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22114.21052631578947%22%20width%3D%2281.57894736842105%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%226%22%20value%3D%22pepr-system%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D1%3Bshadow%3D0%3BlabelBorderColor%3Dnone%3BfontSize%3D14%3BfontColor%3D%23000000%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2265.26315789473684%22%20y%3D%2242%22%20width%3D%22179.4736842105263%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%227%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%20target%3D%224%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%228%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%22160%22%20y%3D%22119.66666666666674%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%229%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473682%22%20y%3D%22180%22%20width%3D%22104.47631578947372%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2210%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2211%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Admission%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20x%3D%2245.739473684210566%22%20y%3D%224.670000000000016%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2212%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473684%22%20y%3D%22100%22%20width%3D%22104.47631578947369%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2213%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Watcher%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20x%3D%2245.73947368421053%22%20y%3D%224.670000000000002%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2214%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2215%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Validating%20Webhook%26lt%3B%2Ffont%26gt%3B%26lt%3Bdiv%26gt%3B%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3B%26lt%3Bbr%26gt%3B%26lt%3B%2Ffont%26gt%3B%26lt%3B%2Fdiv%26gt%3B%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dapi%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22270%22%20y%3D%2233%22%20width%3D%2250%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Kubernetes Control Plane
Pepr Mutating Webhook
Pepr Validating Webhook

API Server
Zarf Mutating Webhook
Istio Mutating Webhook
ns
istio-tenant-gateway
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Tenant Ingress Gateway 
LoadBalancer
Istio Ingress Gateway
External
LoadBalancer
Kubelet
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
ns
authservice
AuthService
ns
istio-admin-gateway
svc
Admin Ingress Gateway LoadBalancer
Istio Ingress Gateway
External
LoadBalancer
ns
grafana
Grafana
ns
keycloak
Keycloak
loki
Loki Backend
Loki Gateway
Loki Read
Loki Write
ns
ns
vector
Vector
ns
zarf
Zarf Agent
Zarf Registry
pepr-system
ns
Pepr Watcher
Pepr Admission
ns
monitoring
Kube State Metrics
Node Exporter
Prometheus
Alertmanager
Prometheus Operator
ns
velero
Velero
ns
generic customer namespace
customer application
End User
neuvector
ns
NeuVector Manager
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221625%22%20y%3D%22230%22%20width%3D%2273.68%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
NeuVector Controller
NeuVector Enforcer
NeuVector Scanner
IP Allowlist
Cluster Administrator
ns
istio-system
istiod
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Legend
Pod
Kubernetes Cluster
Internal LoadBalancer
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
External LoadBalancer
ns
Namespace
Network Firewall
Cloud Computing
External Database
External SIEM Tool
External Storage
\ No newline at end of file +
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22300%22%20y%3D%2268%22%20width%3D%22320%22%20height%3D%22382%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%223%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%222%22%3E%3CmxGeometry%20width%3D%22320%22%20height%3D%22330%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%224%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23f5f5f5%3BfontColor%3D%23333333%3BstrokeColor%3D%23666666%3BarcSize%3D9%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20y%3D%2220.5%22%20width%3D%22310%22%20height%3D%22309.5%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%225%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22114.21052631578947%22%20width%3D%2281.57894736842105%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%226%22%20value%3D%22pepr-system%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D1%3Bshadow%3D0%3BlabelBorderColor%3Dnone%3BfontSize%3D14%3BfontColor%3D%23000000%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2265.26315789473684%22%20y%3D%2242%22%20width%3D%22179.4736842105263%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%227%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%20target%3D%224%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%228%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%22160%22%20y%3D%22119.66666666666674%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%229%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473682%22%20y%3D%22180%22%20width%3D%22104.47631578947372%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2210%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2211%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Admission%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20x%3D%2245.739473684210566%22%20y%3D%224.670000000000016%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2212%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473684%22%20y%3D%22100%22%20width%3D%22104.47631578947369%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2213%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Watcher%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20x%3D%2245.73947368421053%22%20y%3D%224.670000000000002%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2214%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2215%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Validating%20Webhook%26lt%3B%2Ffont%26gt%3B%26lt%3Bdiv%26gt%3B%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3B%26lt%3Bbr%26gt%3B%26lt%3B%2Ffont%26gt%3B%26lt%3B%2Fdiv%26gt%3B%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dapi%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22270%22%20y%3D%2233%22%20width%3D%2250%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Kubernetes Control Plane
Pepr Mutating Webhook
Pepr Validating Webhook

API Server
Zarf Mutating Webhook
Istio Mutating Webhook
ns
Kubernetes
istio-tenant-gateway
Namespace
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Tenant Ingress Gateway 
LoadBalancer
Istio Ingress Gateway
External
LoadBalancer
Kubelet
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
ns
Kubernetes authservice Namespace
AuthService
ns
Kubernetes grafana Namespace
Grafana
ns
Kubernetes 
istio-admin-gateway 
Namespace
svc
Admin Ingress Gateway LoadBalancer
Istio Ingress Gateway
External
LoadBalancer
ns
Kubernetes keycloak Namespace
Keycloak
Kubernetes loki Namespace
Loki Backend
Loki Gateway
Loki Read
Loki Write
ns
ns
Kubernetes vector Namespace
Vector
ns
Kubernetes zarf Namespace
Zarf Agent
Zarf Registry
Kubernetes pepr-system Namespace
ns
Pepr Watcher
Pepr Admission
ns
Kubernetes monitoring Namespace
Kube State Metrics
Node Exporter
Prometheus
Alertmanager
Prometheus Operator
ns
Kubernetes velero Namespace
Velero
ns
generic customer namespace
customer application
End User
Kubernetes neuvector Namespace
ns
NeuVector Manager
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221625%22%20y%3D%22230%22%20width%3D%2273.68%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
NeuVector Controller
NeuVector Enforcer
NeuVector Scanner
IP Allowlist
Cluster Administrator
ns
Kubernetes istio-system Namespace
istiod
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Legend
Pod
Kubernetes Cluster
Internal LoadBalancer
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
External LoadBalancer
ns
Namespace
Network Firewall
Cloud Computing
External Database
External SIEM Tool
External Storage
Kubernetes Cluster
\ No newline at end of file diff --git a/docs/.images/uds-core-arch-ports-protocols.svg b/docs/.images/uds-core-arch-ports-protocols.svg index 69b3e41b1..318acb3fa 100644 --- a/docs/.images/uds-core-arch-ports-protocols.svg +++ b/docs/.images/uds-core-arch-ports-protocols.svg @@ -1,4 +1,3 @@ - -
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22300%22%20y%3D%2268%22%20width%3D%22320%22%20height%3D%22382%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%223%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%222%22%3E%3CmxGeometry%20width%3D%22320%22%20height%3D%22330%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%224%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23f5f5f5%3BfontColor%3D%23333333%3BstrokeColor%3D%23666666%3BarcSize%3D9%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20y%3D%2220.5%22%20width%3D%22310%22%20height%3D%22309.5%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%225%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22114.21052631578947%22%20width%3D%2281.57894736842105%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%226%22%20value%3D%22pepr-system%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D1%3Bshadow%3D0%3BlabelBorderColor%3Dnone%3BfontSize%3D14%3BfontColor%3D%23000000%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2265.26315789473684%22%20y%3D%2242%22%20width%3D%22179.4736842105263%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%227%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%20target%3D%224%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%228%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%22160%22%20y%3D%22119.66666666666674%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%229%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473682%22%20y%3D%22180%22%20width%3D%22104.47631578947372%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2210%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2211%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Admission%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20x%3D%2245.739473684210566%22%20y%3D%224.670000000000016%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2212%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473684%22%20y%3D%22100%22%20width%3D%22104.47631578947369%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2213%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Watcher%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20x%3D%2245.73947368421053%22%20y%3D%224.670000000000002%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2214%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2215%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Validating%20Webhook%26lt%3B%2Ffont%26gt%3B%26lt%3Bdiv%26gt%3B%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3B%26lt%3Bbr%26gt%3B%26lt%3B%2Ffont%26gt%3B%26lt%3B%2Fdiv%26gt%3B%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dapi%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22270%22%20y%3D%2233%22%20width%3D%2250%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Kubernetes Control Plane
Pepr Mutating Webhook
Pepr Validating Webhook

API Server
Zarf Mutating Webhook
Istio Mutating Webhook
ns
istio-tenant-gateway
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Tenant Ingress Gateway 
LoadBalancer
443/HTTPS
Istio Ingress Gateway
443/HTTPS
External
LoadBalancer
All in-cluster traffic is secured via STRICT Istio mTLS.
All applications are configured to have metrics scraped via Prometheus.
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Legend
Pod
Kubernetes Cluster
Internal LoadBalancer
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
External LoadBalancer
ns
Namespace
Network Firewall
Cloud Computing
External Database
External SIEM Tool
External Storage
Egress Traffic
Bidirectional Traffic
Ingress Traffic
Kubelet
ns
zarf
Zarf Agent
Zarf Registry
31999/HTTP
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
ns
authservice
AuthService
ns
istio-admin-gateway
svc
Admin Ingress Gateway LoadBalancer
443/HTTPS
Istio Ingress Gateway
443/HTTPS
External
LoadBalancer
ns
grafana
Grafana
ns
keycloak
Keycloak
loki
3100/TCP
3100/TCP
3100/TCP
3100/TCP
Loki Backend
Loki Gateway
Loki Read
Loki Write
ns
3100/TCP
pepr-system
ns
Pepr Watcher
Pepr Admission
ns
monitoring
9093/HTTPS
Kube State Metrics
Node Exporter
Prometheus
Alertmanager
Prometheus Operator
443/HTTPS
9100/HTTPS
ns
velero
Velero
ns
generic customer namespace
customer application
End User
neuvector
ns
NeuVector Manager
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221625%22%20y%3D%22230%22%20width%3D%2273.68%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
NeuVector Controller
NeuVector Enforcer
NeuVector Scanner
18300,18301,18400,18401,18402/TCP
IP Allowlist
Cluster Administrator
8080/HTTP
8080/HTTPS
443/HTTPS
443/HTTPS
443/HTTPS
9090/HTTPS
8080/HTTPS
8443/HTTPS
443/HTTPS
443/HTTPS
6443/HTTPS
443/HTTPS
ns
istio-system
istiod
6443/HTTPS
443/HTTPS
443/HTTPS
8080/HTTPS
10003/GRPC
5432/SSL
3000/HTTPS
8080/HTTPS
8080/HTTPS
443/HTTPS
443/HTTPS
443/HTTPS
ns
vector
Vector
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22shape%3Dimage%3BverticalLabelPosition%3Dbottom%3BlabelBackgroundColor%3Ddefault%3BverticalAlign%3Dtop%3Baspect%3Dfixed%3BimageAspect%3D0%3Bimage%3Ddata%3Aimage%2Fsvg%2Bxml%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%2BJiN4YTsgIDwvZz4mI3hhOzwvc3ZnPg%3D%3D%3Bcontainer%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221688.65%22%20y%3D%22676.91%22%20width%3D%2240%22%20height%3D%2240%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
\ No newline at end of file +
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23bac8d3%3BstrokeColor%3D%2323445d%3BgradientColor%3Dnone%3Bglass%3D0%3Bshadow%3D0%3Bsketch%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22210%22%20y%3D%22-60%22%20width%3D%22770%22%20height%3D%22908%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22300%22%20y%3D%2268%22%20width%3D%22320%22%20height%3D%22382%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%223%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%222%22%3E%3CmxGeometry%20width%3D%22320%22%20height%3D%22330%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%224%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BlabelBorderColor%3Dnone%3BfillColor%3D%23f5f5f5%3BfontColor%3D%23333333%3BstrokeColor%3D%23666666%3BarcSize%3D9%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20y%3D%2220.5%22%20width%3D%22310%22%20height%3D%22309.5%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%225%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22114.21052631578947%22%20width%3D%2281.57894736842105%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%226%22%20value%3D%22pepr-system%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D1%3Bshadow%3D0%3BlabelBorderColor%3Dnone%3BfontSize%3D14%3BfontColor%3D%23000000%3B%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2265.26315789473684%22%20y%3D%2242%22%20width%3D%22179.4736842105263%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%227%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%20target%3D%224%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%228%22%20style%3D%22edgeStyle%3DorthogonalEdgeStyle%3Brounded%3D0%3BorthogonalLoop%3D1%3BjettySize%3Dauto%3Bhtml%3D1%3BexitX%3D1%3BexitY%3D0.5%3BexitDx%3D0%3BexitDy%3D0%3B%22%20edge%3D%221%22%20parent%3D%223%22%20source%3D%2213%22%3E%3CmxGeometry%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%22160%22%20y%3D%22119.66666666666674%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%229%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473682%22%20y%3D%22180%22%20width%3D%22104.47631578947372%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2210%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2211%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Admission%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%229%22%3E%3CmxGeometry%20x%3D%2245.739473684210566%22%20y%3D%224.670000000000016%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2212%22%20value%3D%22%22%20style%3D%22group%22%20vertex%3D%221%22%20connectable%3D%220%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%2234.26315789473684%22%20y%3D%22100%22%20width%3D%22104.47631578947369%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2213%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Watcher%26lt%3B%2Ffont%26gt%3B%22%20style%3D%22text%3BstrokeColor%3Dnone%3Balign%3Dcenter%3BfillColor%3Dnone%3Bhtml%3D1%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20x%3D%2245.73947368421053%22%20y%3D%224.670000000000002%22%20width%3D%2258.73684210526316%22%20height%3D%2230%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2214%22%20value%3D%22%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dpod%22%20vertex%3D%221%22%20parent%3D%2212%22%3E%3CmxGeometry%20width%3D%2236.11666666666667%22%20height%3D%2234.672%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2215%22%20value%3D%22%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3BPepr%20Validating%20Webhook%26lt%3B%2Ffont%26gt%3B%26lt%3Bdiv%26gt%3B%26lt%3Bfont%20color%3D%26quot%3B%23000000%26quot%3B%26gt%3B%26lt%3Bbr%26gt%3B%26lt%3B%2Ffont%26gt%3B%26lt%3B%2Fdiv%26gt%3B%22%20style%3D%22aspect%3Dfixed%3Bsketch%3D0%3Bhtml%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BverticalLabelPosition%3Dbottom%3BverticalAlign%3Dtop%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon2%3BprIcon%3Dapi%22%20vertex%3D%221%22%20parent%3D%223%22%3E%3CmxGeometry%20x%3D%22270%22%20y%3D%2233%22%20width%3D%2250%22%20height%3D%2248%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Kubernetes Control Plane
Pepr Mutating Webhook
Pepr Validating Webhook

API Server
Zarf Mutating Webhook
Istio Mutating Webhook
ns
Kubernetes
istio-tenant-gateway
Namespace
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Tenant Ingress Gateway 
LoadBalancer
443/HTTPS
Istio Ingress Gateway
443/HTTPS
External
LoadBalancer
All in-cluster traffic is secured via STRICT Istio mTLS.
All applications are configured to have metrics scraped via Prometheus.
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
Legend
Pod
Kubernetes Cluster
Internal LoadBalancer
svc
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22External%26lt%3Bbr%26gt%3BLoadBalancer%22%20style%3D%22image%3Bsketch%3D0%3Baspect%3Dfixed%3Bhtml%3D1%3Bpoints%3D%5B%5D%3Balign%3Dcenter%3BfontSize%3D12%3Bimage%3Dimg%2Flib%2Fmscae%2FLoad_Balancer_feature.svg%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221824.5%22%20y%3D%22-107%22%20width%3D%2250%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
External LoadBalancer
ns
Namespace
Network Firewall
Cloud Computing
External Database
External SIEM Tool
External Storage
Egress Traffic
Bidirectional Traffic
Ingress Traffic
Kubelet
ns
Kubernetes zarf Namespace
Zarf Agent
Zarf Registry
31999/HTTP
Kubernetes Cluster
ns
Kubernetes grafana Namespace
Grafana
grafana.<ADMIN_DOMAIN>
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22Namespace%22%20style%3D%22text%3Bhtml%3D1%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%222233.06%22%20y%3D%22-24.851212121212132%22%20width%3D%2286.94%22%20height%3D%2230.909090909090907%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
ns
Kubernetes authservice Namespace
AuthService
ns
Kubernetes
istio-admin-gateway
Namespace
svc
Admin Ingress Gateway LoadBalancer
443/HTTPS
Istio Ingress Gateway
443/HTTPS
External
LoadBalancer
ns
Kubernetes keycloak Namespace
Keycloak
keycloak.<ADMIN_DOMAIN>
sso.<DOMAIN>
Kubernetes loki Namespace
3100/TCP
3100/TCP
3100/TCP
3100/TCP
Loki Backend
Loki Gateway
Loki Read
Loki Write
ns
3100/TCP
Kubernetes pepr-system Namespace
ns
Pepr Watcher
Pepr Admission
ns
Kubernetes monitoring Namespace
9093/HTTPS
Kube State Metrics
Node Exporter
Prometheus
Alertmanager
Prometheus Operator
443/HTTPS
9100/HTTPS
ns
Kubernetes velero Namespace
Velero
ns
generic customer namespace
customer application
End User
Kubernetes neuvector Namespace
ns
NeuVector Manager
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22ns%22%20style%3D%22html%3D1%3Bdashed%3D0%3Bwhitespace%3Dwrap%3BfillColor%3D%232875E2%3BstrokeColor%3D%23ffffff%3Bpoints%3D%5B%5B0.005%2C0.63%2C0%5D%2C%5B0.1%2C0.2%2C0%5D%2C%5B0.9%2C0.2%2C0%5D%2C%5B0.5%2C0%2C0%5D%2C%5B0.995%2C0.63%2C0%5D%2C%5B0.72%2C0.99%2C0%5D%2C%5B0.5%2C1%2C0%5D%2C%5B0.28%2C0.99%2C0%5D%5D%3Bshape%3Dmxgraph.kubernetes.icon%3BprIcon%3Dns%3BlabelBorderColor%3Dnone%3BfontColor%3D%23FFFFFF%3BlabelPosition%3Dcenter%3BverticalLabelPosition%3Dmiddle%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3Brounded%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221625%22%20y%3D%22230%22%20width%3D%2273.68%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
NeuVector Controller
NeuVector Enforcer
NeuVector Scanner
18300,18301,18400,18401,18402/TCP
neuvector.<ADMIN_DOMAIN>
IP Allowlist
Cluster Administrator
8080/HTTP
8080/HTTPS
443/HTTPS
443/HTTPS
443/HTTPS
9090/HTTPS
8080/HTTPS
8443/HTTPS
443/HTTPS
443/HTTPS
6443/HTTPS
443/HTTPS
ns
Kubernetes istio-system Namespace
istiod
6443/HTTPS
443/HTTPS
443/HTTPS
8080/HTTPS
10003/GRPC
5432/SSL
3000/HTTPS
8080/HTTPS
8080/HTTPS
443/HTTPS
443/HTTPS
443/HTTPS
ns
Kubernetes vector Namespace
Vector
%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22shape%3Dimage%3BverticalLabelPosition%3Dbottom%3BlabelBackgroundColor%3Ddefault%3BverticalAlign%3Dtop%3Baspect%3Dfixed%3BimageAspect%3D0%3Bimage%3Ddata%3Aimage%2Fsvg%2Bxml%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%2BJiN4YTsgIDwvZz4mI3hhOzwvc3ZnPg%3D%3D%3Bcontainer%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%221688.65%22%20y%3D%22676.91%22%20width%3D%2240%22%20height%3D%2240%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E
\ No newline at end of file From 498574c0a41b50afc2ecaa36225c412c03ed6ed1 Mon Sep 17 00:00:00 2001 From: Chance <139784371+UnicornChance@users.noreply.github.com> Date: Fri, 13 Dec 2024 12:42:30 -0700 Subject: [PATCH 4/7] feat: configurable authentication flows (#1102) ## Description See [uds-identity-config PR](https://github.com/defenseunicorns/uds-identity-config/pull/282). The real change is adding the secretRef for getting env's into the identity config init container. Some whitespace cleanup in statefulset and some new values overrides for the realm init. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed --- .../chart/templates/secret-kc-realm.yaml | 13 +++++++-- src/keycloak/chart/templates/statefulset.yaml | 13 +++++---- src/keycloak/chart/values.schema.json | 17 +++++++++++ src/keycloak/chart/values.yaml | 29 ++++++++++++------- 4 files changed, 54 insertions(+), 18 deletions(-) diff --git a/src/keycloak/chart/templates/secret-kc-realm.yaml b/src/keycloak/chart/templates/secret-kc-realm.yaml index a41db2617..a8e5a20b3 100644 --- a/src/keycloak/chart/templates/secret-kc-realm.yaml +++ b/src/keycloak/chart/templates/secret-kc-realm.yaml @@ -5,7 +5,7 @@ apiVersion: v1 kind: Secret metadata: name: {{ include "keycloak.fullname" . }}-realm-env - namespace: {{ .Release.Namespace }} + namespace: {{ .Release.Namespace }} labels: {{- include "keycloak.labels" . | nindent 4 }} type: Opaque @@ -16,4 +16,13 @@ data: {{- else }} REALM_{{ $key }}: {{ $value | b64enc }} {{- end }} - {{- end }} \ No newline at end of file + {{- end }} + + SOCIAL_LOGIN_ENABLED: {{ .Values.realmAuthFlows.SOCIAL_AUTH_ENABLED | toString | b64enc }} + X509_LOGIN_ENABLED: {{ .Values.realmAuthFlows.X509_AUTH_ENABLED | toString | b64enc }} + USERNAME_PASSWORD_AUTH_ENABLED: {{ .Values.realmAuthFlows.USERNAME_PASSWORD_AUTH_ENABLED | toString | b64enc }} + REGISTER_BUTTON_ENABLED: {{ or .Values.realmAuthFlows.USERNAME_PASSWORD_AUTH_ENABLED .Values.realmAuthFlows.X509_AUTH_ENABLED | toString | b64enc }} + DENY_USERNAME_PASSWORD_ENABLED: {{ ternary "DISABLED" "REQUIRED" (.Values.realmAuthFlows.USERNAME_PASSWORD_AUTH_ENABLED) | b64enc }} + RESET_CREDENTIAL_FLOW_ENABLED: {{ ternary "REQUIRED" "DISABLED" (.Values.realmAuthFlows.USERNAME_PASSWORD_AUTH_ENABLED) | b64enc }} + REGISTRATION_FORM_ENABLED: {{ ternary "REQUIRED" "DISABLED" (or .Values.realmAuthFlows.USERNAME_PASSWORD_AUTH_ENABLED .Values.realmAuthFlows.X509_AUTH_ENABLED) | b64enc }} + OTP_ENABLED: {{ (and .Values.realmAuthFlows.OTP_ENABLED .Values.realmAuthFlows.USERNAME_PASSWORD_AUTH_ENABLED) | toString | b64enc }} diff --git a/src/keycloak/chart/templates/statefulset.yaml b/src/keycloak/chart/templates/statefulset.yaml index 6f3a9e570..1e18ee733 100644 --- a/src/keycloak/chart/templates/statefulset.yaml +++ b/src/keycloak/chart/templates/statefulset.yaml @@ -28,7 +28,8 @@ spec: {{- end }} {{- if not .Values.devMode }} annotations: - postgres-hash: {{ include (print $.Template.BasePath "/secret-postgresql.yaml") . | sha256sum }} + postgres-hash: {{ include (print $.Template.BasePath "/secret-postgresql.yaml") . | sha256sum }} + kc-realm-hash: {{ include (print $.Template.BasePath "/secret-kc-realm.yaml") . | sha256sum }} {{- end }} spec: securityContext: @@ -52,13 +53,16 @@ spec: mountPath: /opt/keycloak/themes - name: conf mountPath: /opt/keycloak/conf + envFrom: + - secretRef: + name: {{ include "keycloak.fullname" . }}-realm-env containers: - name: keycloak image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" imagePullPolicy: {{ .Values.image.pullPolicy }} securityContext: {{- toYaml .Values.securityContext | nindent 12 }} - command: + command: - "/opt/keycloak/bin/kc.sh" args: {{- if .Values.devMode }} @@ -128,14 +132,13 @@ spec: - name: KC_CACHE_STACK value: kubernetes - name: KC_SPI_STICKY_SESSION_ENCODER_INFINISPAN_SHOULD_ATTACH_ROUTE - value: "false" + value: "false" # java opts for jgroups required for infinispan distributed cache when using the kubernetes stack. # https://www.keycloak.org/server/caching - name: JAVA_OPTS_APPEND value: -Djgroups.dns.query={{ include "keycloak.fullname" . }}-headless.keycloak.svc.cluster.local - # Postgres database configuration - - name: KC_DB + - name: KC_DB value: postgres - name: KC_DB_URL_HOST valueFrom: diff --git a/src/keycloak/chart/values.schema.json b/src/keycloak/chart/values.schema.json index f05bdc3a8..9348c158d 100644 --- a/src/keycloak/chart/values.schema.json +++ b/src/keycloak/chart/values.schema.json @@ -292,6 +292,23 @@ } } }, + "realmAuthFlows": { + "type": "object", + "properties": { + "USERNAME_PASSWORD_AUTH_ENABLED": { + "type": "boolean" + }, + "X509_AUTH_ENABLED": { + "type": "boolean" + }, + "SOCIAL_AUTH_ENABLED": { + "type": "boolean" + }, + "OTP_ENABLED": { + "type": "boolean" + } + } + }, "resources": { "type": "object", "properties": { diff --git a/src/keycloak/chart/values.yaml b/src/keycloak/chart/values.yaml index 7f61f9012..c4486d9a1 100644 --- a/src/keycloak/chart/values.yaml +++ b/src/keycloak/chart/values.yaml @@ -27,17 +27,24 @@ realm: uds # UDS Identity Config Realm Environment Variables. More info here: https://github.com/defenseunicorns/uds-identity-config/blob/main/docs/CUSTOMIZE.md#templated-realm-values realmInitEnv: GOOGLE_IDP_ENABLED: false -# GOOGLE_IDP_ID: "" -# GOOGLE_IDP_SIGNING_CERT: "" -# GOOGLE_IDP_NAME_ID_FORMAT: "" -# GOOGLE_IDP_CORE_ENTITY_ID: "" -# GOOGLE_IDP_ADMIN_GROUP: "" -# GOOGLE_IDP_AUDITOR_GROUP: "" -# PASSWORD_POLICY: "hashAlgorithm(pbkdf2-sha256) and forceExpiredPasswordChange(90) and specialChars(2) and lowerCase(0) and upperCase(0) and passwordHistory(5) and length(12) and notUsername(undefined) and digits(0)" -# EMAIL_VERIFICATION_ENABLED: true -# OTP_ENABLED: true -# TERMS_AND_CONDITIONS_ENABLED: true -# REALM_X509_OCSP_FAIL_OPEN: true + # GOOGLE_IDP_ID: "" + # GOOGLE_IDP_SIGNING_CERT: "" + # GOOGLE_IDP_NAME_ID_FORMAT: "" + # GOOGLE_IDP_CORE_ENTITY_ID: "" + # GOOGLE_IDP_ADMIN_GROUP: "" + # GOOGLE_IDP_AUDITOR_GROUP: "" + # PASSWORD_POLICY: "hashAlgorithm(pbkdf2-sha256) and forceExpiredPasswordChange(90) and specialChars(2) and lowerCase(0) and upperCase(0) and passwordHistory(5) and length(12) and notUsername(undefined) and digits(0)" + # EMAIL_VERIFICATION_ENABLED: true + # TERMS_AND_CONDITIONS_ENABLED: true + # X509_OCSP_FAIL_OPEN: true + # DISABLE_REGISTRATION_FIELDS: false + +# UDS Identity Config Authentication Flows Environment Variables. More info here: https://github.com/defenseunicorns/uds-identity-config/blob/main/docs/CUSTOMIZE.md#templated-realm-values +realmAuthFlows: + USERNAME_PASSWORD_AUTH_ENABLED: true + X509_AUTH_ENABLED: true + SOCIAL_AUTH_ENABLED: true + OTP_ENABLED: true # Generates an initial password for first admin user - only use if install is headless # (i.e. cannot hit keycloak UI with `zarf connect keycloak`), password should be changed after initial login From 496ea405e5270fd130ae8b6d21283a3c10261407 Mon Sep 17 00:00:00 2001 From: Clint Date: Fri, 13 Dec 2024 14:21:07 -0600 Subject: [PATCH 5/7] chore: update doc-gen output_dir (#1123) ## Description The generated docs were moved, but it seems the script to generate them was not updated to reflect the new location. This PR fixes that. ## Related Issue Relates to #1119 because at the moment it has docs that shouldn't be generated in it. ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) - [ ] ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [x] [Contributor Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md) followed Signed-off-by: catsby Co-authored-by: Micah Nagel --- src/pepr/docs-gen/main.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pepr/docs-gen/main.ts b/src/pepr/docs-gen/main.ts index de8081786..872acd0aa 100644 --- a/src/pepr/docs-gen/main.ts +++ b/src/pepr/docs-gen/main.ts @@ -7,7 +7,7 @@ import * as path from "path"; const INDENT_SIZE = 20; const MAX_HEADER_LEVEL = 6; const MAX_DEPTH = 10; -const OUTPUT_DIR = "./docs/reference/configuration/custom-resources/"; +const OUTPUT_DIR = "./docs/reference/configuration/custom resources/"; const TABLE_STYLE = 'style="width: 100%; table-layout: fixed;"'; // Utility to capitalize the first letter of a string From 77aa0b4837458169aaa4081fc82afdaf66723668 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 13 Dec 2024 14:50:50 -0700 Subject: [PATCH 6/7] chore(deps): update grafana to 11.4.0 (#1053) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cgr.dev/du-uds-defenseunicorns/curl-fips](https://images.chainguard.dev/directory/image/curl-fips/overview) ([source](https://redirect.github.com/chainguard-images/images-private/tree/HEAD/images/curl-fips)) | patch | `8.11.0` -> `8.11.1` | | [cgr.dev/du-uds-defenseunicorns/grafana-fips](https://images.chainguard.dev/directory/image/grafana-fips/overview) ([source](https://redirect.github.com/chainguard-images/images-private/tree/HEAD/images/grafana-fips)) | minor | `11.3.1` -> `11.4.0` | | [cgr.dev/du-uds-defenseunicorns/k8s-sidecar-fips](https://images.chainguard.dev/directory/image/k8s-sidecar-fips/overview) ([source](https://redirect.github.com/chainguard-images/images-private/tree/HEAD/images/k8s-sidecar-fips)) | patch | `1.28.0` -> `1.28.1` | | [docker.io/curlimages/curl](https://redirect.github.com/curl/curl-container) | patch | `8.11.0` -> `8.11.1` | | docker.io/grafana/grafana | minor | `11.3.1` -> `11.4.0` | | [ghcr.io/kiwigrid/k8s-sidecar](https://redirect.github.com/kiwigrid/k8s-sidecar) | patch | `1.28.0` -> `1.28.1` | | [grafana](https://grafana.com) ([source](https://redirect.github.com/grafana/helm-charts)) | minor | `8.6.1` -> `8.7.0` | | [registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar](https://redirect.github.com/kiwigrid/k8s-sidecar) ([source](https://repo1.dso.mil/dsop/kiwigrid/k8s-sidecar)) | patch | `1.28.0` -> `1.28.1` | | [registry1.dso.mil/ironbank/opensource/grafana/grafana](https://redirect.github.com/grafana/grafana) ([source](https://repo1.dso.mil/dsop/opensource/grafana/grafana)) | minor | `11.3.1` -> `11.4.0` | --- ### Release Notes
curl/curl-container (docker.io/curlimages/curl) ### [`v8.11.1`](https://redirect.github.com/curl/curl-container/blob/HEAD/CHANGELOG.md#8111---2024-12-11) [Compare Source](https://redirect.github.com/curl/curl-container/compare/8.11.0...8.11.1) ##### Changed - bump to curl 8.11.1 - bump to alpine:3.21.0
kiwigrid/k8s-sidecar (ghcr.io/kiwigrid/k8s-sidecar) ### [`v1.28.1`](https://redirect.github.com/kiwigrid/k8s-sidecar/releases/tag/1.28.1) [Compare Source](https://redirect.github.com/kiwigrid/k8s-sidecar/compare/1.28.0...1.28.1) ##### 📦 Dependencies - Bump docker/setup-qemu-action from 2 to 3 - PR: [#​367](https://redirect.github.com/kiwigrid/k8s-sidecar/issues/367) - Bump mikepenz/release-changelog-builder-action from 4 to 5 - PR: [#​366](https://redirect.github.com/kiwigrid/k8s-sidecar/issues/366) - update kind node images - PR: [#​365](https://redirect.github.com/kiwigrid/k8s-sidecar/issues/365)
grafana/helm-charts (grafana) ### [`v8.7.0`](https://redirect.github.com/grafana/helm-charts/releases/tag/grafana-8.7.0) [Compare Source](https://redirect.github.com/grafana/helm-charts/compare/grafana-8.6.4...grafana-8.7.0) The leading tool for querying and visualizing time series and metrics. #### What's Changed - \[grafana] Update to version 11.4.0 by [@​terop](https://redirect.github.com/terop) in [https://github.com/grafana/helm-charts/pull/3475](https://redirect.github.com/grafana/helm-charts/pull/3475) **Full Changelog**: https://github.com/grafana/helm-charts/compare/tempo-distributed-1.26.0...grafana-8.7.0 ### [`v8.6.4`](https://redirect.github.com/grafana/helm-charts/releases/tag/grafana-8.6.4) [Compare Source](https://redirect.github.com/grafana/helm-charts/compare/grafana-8.6.3...grafana-8.6.4) The leading tool for querying and visualizing time series and metrics. #### What's Changed - \[grafana] Add configuration options for the number of retries done by the sidecar by [@​cbos](https://redirect.github.com/cbos) in [https://github.com/grafana/helm-charts/pull/3454](https://redirect.github.com/grafana/helm-charts/pull/3454) #### New Contributors - [@​cbos](https://redirect.github.com/cbos) made their first contribution in [https://github.com/grafana/helm-charts/pull/3454](https://redirect.github.com/grafana/helm-charts/pull/3454) **Full Changelog**: https://github.com/grafana/helm-charts/compare/helm-loki-6.22.0...grafana-8.6.4 ### [`v8.6.3`](https://redirect.github.com/grafana/helm-charts/releases/tag/grafana-8.6.3) [Compare Source](https://redirect.github.com/grafana/helm-charts/compare/grafana-8.6.2...grafana-8.6.3) The leading tool for querying and visualizing time series and metrics. #### What's Changed - \[grafana] values.yaml: update alerting examples and ref by [@​michaelruigrok](https://redirect.github.com/michaelruigrok) in [https://github.com/grafana/helm-charts/pull/3450](https://redirect.github.com/grafana/helm-charts/pull/3450) #### New Contributors - [@​michaelruigrok](https://redirect.github.com/michaelruigrok) made their first contribution in [https://github.com/grafana/helm-charts/pull/3450](https://redirect.github.com/grafana/helm-charts/pull/3450) **Full Changelog**: https://github.com/grafana/helm-charts/compare/beyla-1.5.0...grafana-8.6.3 ### [`v8.6.2`](https://redirect.github.com/grafana/helm-charts/releases/tag/grafana-8.6.2) [Compare Source](https://redirect.github.com/grafana/helm-charts/compare/grafana-8.6.1...grafana-8.6.2) The leading tool for querying and visualizing time series and metrics. #### What's Changed - \[grafana] Updated pod labels to include all labels by [@​jimmybchopps](https://redirect.github.com/jimmybchopps) in [https://github.com/grafana/helm-charts/pull/3423](https://redirect.github.com/grafana/helm-charts/pull/3423) #### New Contributors - [@​jimmybchopps](https://redirect.github.com/jimmybchopps) made their first contribution in [https://github.com/grafana/helm-charts/pull/3423](https://redirect.github.com/grafana/helm-charts/pull/3423) **Full Changelog**: https://github.com/grafana/helm-charts/compare/mimir-distributed-5.6.0-weekly.318...grafana-8.6.2
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- src/grafana/common/zarf.yaml | 2 +- src/grafana/values/registry1-values.yaml | 4 ++-- src/grafana/values/unicorn-values.yaml | 6 +++--- src/grafana/values/upstream-values.yaml | 6 +++--- src/grafana/zarf.yaml | 16 ++++++++-------- 5 files changed, 17 insertions(+), 17 deletions(-) diff --git a/src/grafana/common/zarf.yaml b/src/grafana/common/zarf.yaml index 5ace535b5..2392cec36 100644 --- a/src/grafana/common/zarf.yaml +++ b/src/grafana/common/zarf.yaml @@ -17,7 +17,7 @@ components: localPath: ../chart - name: grafana url: https://grafana.github.io/helm-charts/ - version: 8.6.1 + version: 8.7.0 namespace: grafana valuesFiles: - ../values/values.yaml diff --git a/src/grafana/values/registry1-values.yaml b/src/grafana/values/registry1-values.yaml index 87552f2cf..42e902cbd 100644 --- a/src/grafana/values/registry1-values.yaml +++ b/src/grafana/values/registry1-values.yaml @@ -4,7 +4,7 @@ image: registry: registry1.dso.mil repository: ironbank/opensource/grafana/grafana - tag: 11.3.1 + tag: 11.4.0 initChownData: image: @@ -21,4 +21,4 @@ sidecar: image: registry: registry1.dso.mil repository: ironbank/kiwigrid/k8s-sidecar - tag: 1.28.0 + tag: 1.28.1 diff --git a/src/grafana/values/unicorn-values.yaml b/src/grafana/values/unicorn-values.yaml index c57e180bb..e3529fb32 100644 --- a/src/grafana/values/unicorn-values.yaml +++ b/src/grafana/values/unicorn-values.yaml @@ -4,7 +4,7 @@ image: registry: cgr.dev repository: du-uds-defenseunicorns/grafana-fips - tag: 11.3.1 + tag: 11.4.0 initChownData: image: @@ -15,10 +15,10 @@ initChownData: downloadDashboardsImage: registry: cgr.dev repository: du-uds-defenseunicorns/curl-fips - tag: 8.11.0 + tag: 8.11.1 sidecar: image: registry: cgr.dev repository: du-uds-defenseunicorns/k8s-sidecar-fips - tag: 1.28.0 + tag: 1.28.1 diff --git a/src/grafana/values/upstream-values.yaml b/src/grafana/values/upstream-values.yaml index 263ba6787..cb7f31137 100644 --- a/src/grafana/values/upstream-values.yaml +++ b/src/grafana/values/upstream-values.yaml @@ -6,12 +6,12 @@ sidecar: # -- The Docker registry registry: ghcr.io repository: kiwigrid/k8s-sidecar - tag: 1.28.0 + tag: 1.28.1 image: registry: docker.io repository: grafana/grafana - tag: 11.3.1 + tag: 11.4.0 initChownData: image: @@ -22,4 +22,4 @@ initChownData: downloadDashboardsImage: registry: docker.io repository: curlimages/curl - tag: 8.11.0 + tag: 8.11.1 diff --git a/src/grafana/zarf.yaml b/src/grafana/zarf.yaml index 49a174eb7..54ff7056e 100644 --- a/src/grafana/zarf.yaml +++ b/src/grafana/zarf.yaml @@ -24,10 +24,10 @@ components: valuesFiles: - values/upstream-values.yaml images: - - docker.io/grafana/grafana:11.3.1 - - docker.io/curlimages/curl:8.11.0 + - docker.io/grafana/grafana:11.4.0 + - docker.io/curlimages/curl:8.11.1 - docker.io/library/busybox:1.37.0 - - ghcr.io/kiwigrid/k8s-sidecar:1.28.0 + - ghcr.io/kiwigrid/k8s-sidecar:1.28.1 - name: grafana required: true @@ -40,9 +40,9 @@ components: valuesFiles: - values/registry1-values.yaml images: - - registry1.dso.mil/ironbank/opensource/grafana/grafana:11.3.1 + - registry1.dso.mil/ironbank/opensource/grafana/grafana:11.4.0 - registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal:9.5 - - registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar:1.28.0 + - registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar:1.28.1 - name: grafana required: true @@ -55,7 +55,7 @@ components: valuesFiles: - values/unicorn-values.yaml images: - - cgr.dev/du-uds-defenseunicorns/grafana-fips:11.3.1 + - cgr.dev/du-uds-defenseunicorns/grafana-fips:11.4.0 - cgr.dev/du-uds-defenseunicorns/busybox-fips:1.37.0 - - cgr.dev/du-uds-defenseunicorns/curl-fips:8.11.0 - - cgr.dev/du-uds-defenseunicorns/k8s-sidecar-fips:1.28.0 + - cgr.dev/du-uds-defenseunicorns/curl-fips:8.11.1 + - cgr.dev/du-uds-defenseunicorns/k8s-sidecar-fips:1.28.1 From 5b2e3a41cbf079f327ca56c00d6c15e54350779b Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 13 Dec 2024 19:22:36 -0700 Subject: [PATCH 7/7] chore(deps): update support-deps (#1117) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | aws | required_provider | minor | `~> 5.80.0` -> `~> 5.81.0` | | [defenseunicorns/uds-common](https://redirect.github.com/defenseunicorns/uds-common) | | minor | `v1.5.1` -> `v1.6.0` | | ghcr.io/zarf-dev/packages/init | | minor | `v0.44.0` -> `v0.45.0` | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v3.27.7` -> `v3.27.9` | | [weaveworks/eksctl](https://redirect.github.com/weaveworks/eksctl) | | minor | `v0.198.0` -> `v0.199.0` | | [zarf-dev/zarf](https://redirect.github.com/zarf-dev/zarf) | | minor | `v0.44.0` -> `v0.45.0` | --- ### Release Notes
defenseunicorns/uds-common (defenseunicorns/uds-common) ### [`v1.6.0`](https://redirect.github.com/defenseunicorns/uds-common/releases/tag/v1.6.0) [Compare Source](https://redirect.github.com/defenseunicorns/uds-common/compare/v1.5.1...v1.6.0) ##### Features - move mirror ci to publish step ([#​367](https://redirect.github.com/defenseunicorns/uds-common/issues/367)) ([f03863c](https://redirect.github.com/defenseunicorns/uds-common/commit/f03863c34294c86534f2694d15c2f195c071f1aa)) ##### Miscellaneous - **deps:** update uds common support dependencies ([#​358](https://redirect.github.com/defenseunicorns/uds-common/issues/358)) ([a192e5e](https://redirect.github.com/defenseunicorns/uds-common/commit/a192e5e855f68fb13782626bfb562232896d8707)) - **docs:** add uds-package quickstart ([#​363](https://redirect.github.com/defenseunicorns/uds-common/issues/363)) ([0554d10](https://redirect.github.com/defenseunicorns/uds-common/commit/0554d10cdd46b7c8b856201e4b03da8756025d7f)) - refine how bundles are published to require fewer inputs ([#​365](https://redirect.github.com/defenseunicorns/uds-common/issues/365)) ([9b9f7c0](https://redirect.github.com/defenseunicorns/uds-common/commit/9b9f7c0098bfeab51dc5decc10c3276218894d35))
github/codeql-action (github/codeql-action) ### [`v3.27.9`](https://redirect.github.com/github/codeql-action/releases/tag/v3.27.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.27.8...v3.27.9) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between `v2` and `v3` of the CodeQL Action is the node version they support, with `v3` running on node 20 while we continue to release `v2` to support running on node 16. For example `3.22.11` was the first `v3` release and is functionally identical to `2.22.11`. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. ##### 3.27.9 - 12 Dec 2024 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.27.9/CHANGELOG.md) for more information. ### [`v3.27.8`](https://redirect.github.com/github/codeql-action/compare/v3.27.7...v3.27.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.27.7...v3.27.8)
weaveworks/eksctl (weaveworks/eksctl) ### [`v0.199.0`](https://redirect.github.com/weaveworks/eksctl/compare/0.199.0...0.199.0) [Compare Source](https://redirect.github.com/weaveworks/eksctl/compare/0.199.0...0.199.0) ### [`v0.199.0`](https://redirect.github.com/eksctl-io/eksctl/releases/tag/v0.199.0): eksctl 0.199.0 [Compare Source](https://redirect.github.com/weaveworks/eksctl/compare/0.198.0...0.199.0) ### Release v0.199.0 #### 🚀 Features - Support EKS managed nodegroup node repair config ([#​8087](https://redirect.github.com/weaveworks/eksctl/issues/8087)) - Add support for C8g and R8g instance types ([#​8041](https://redirect.github.com/weaveworks/eksctl/issues/8041)) - Add support for `overrideBootstrapCommand` in AL2023 ([#​8078](https://redirect.github.com/weaveworks/eksctl/issues/8078)) #### 🐛 Bug Fixes - Allow importing subnets with IPv6 only ([#​8086](https://redirect.github.com/weaveworks/eksctl/issues/8086)) - EKS Auto Mode should not require setting default addons or OIDC ([#​8082](https://redirect.github.com/weaveworks/eksctl/issues/8082)) #### Acknowledgments The eksctl maintainers would like to sincerely thank [@​cheeseandcereal](https://redirect.github.com/cheeseandcereal) and [@​muhammetssen](https://redirect.github.com/muhammetssen).
zarf-dev/zarf (zarf-dev/zarf) ### [`v0.45.0`](https://redirect.github.com/zarf-dev/zarf/releases/tag/v0.45.0) [Compare Source](https://redirect.github.com/zarf-dev/zarf/compare/v0.44.0...v0.45.0) #### What's Changed - docs: image crc32 hash mutation by [@​AustinAbro321](https://redirect.github.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/3295](https://redirect.github.com/zarf-dev/zarf/pull/3295) - chore(deps): bump codecov/codecov-action from 5.0.7 to 5.1.1 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3298](https://redirect.github.com/zarf-dev/zarf/pull/3298) - chore(deps): bump github.com/mikefarah/yq/v4 from 4.44.5 to 4.44.6 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3300](https://redirect.github.com/zarf-dev/zarf/pull/3300) - chore(deps): bump github.com/fluxcd/pkg/apis/meta from 1.6.1 to 1.7.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3299](https://redirect.github.com/zarf-dev/zarf/pull/3299) - Fix API Version for Flux resource in docs by [@​phillebaba](https://redirect.github.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/3301](https://redirect.github.com/zarf-dev/zarf/pull/3301) - chore(deps): bump github.com/goccy/go-yaml from 1.15.6 to 1.15.8 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3302](https://redirect.github.com/zarf-dev/zarf/pull/3302) - fix: passing context into packager by [@​AustinAbro321](https://redirect.github.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/3303](https://redirect.github.com/zarf-dev/zarf/pull/3303) - chore(deps): bump github.com/anchore/syft from 1.17.0 to 1.18.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3308](https://redirect.github.com/zarf-dev/zarf/pull/3308) - chore(deps): bump github.com/moby/moby from 27.3.1+incompatible to 27.4.0+incompatible by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3309](https://redirect.github.com/zarf-dev/zarf/pull/3309) - feat: apply `--no-color` to dev and console logging option, remove `console-no-color` by [@​AustinAbro321](https://redirect.github.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/3312](https://redirect.github.com/zarf-dev/zarf/pull/3312) - chore(deps): bump github/codeql-action from 3.27.6 to 3.27.7 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3316](https://redirect.github.com/zarf-dev/zarf/pull/3316) - chore(deps): bump github.com/fluxcd/pkg/apis/meta from 1.7.0 to 1.8.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3315](https://redirect.github.com/zarf-dev/zarf/pull/3315) - fix: truncate agent pod annotation so scheduler doesn't fail when annoation limit is exceeded by [@​AustinAbro321](https://redirect.github.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/3314](https://redirect.github.com/zarf-dev/zarf/pull/3314) - chore(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3320](https://redirect.github.com/zarf-dev/zarf/pull/3320) - chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/zarf-dev/zarf/pull/3323](https://redirect.github.com/zarf-dev/zarf/pull/3323) - feat: add metadata.annotations to package schema by [@​AustinAbro321](https://redirect.github.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/3319](https://redirect.github.com/zarf-dev/zarf/pull/3319) **Full Changelog**: https://github.com/zarf-dev/zarf/compare/v0.44.0...v0.45.0
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/bundles/aks/uds-bundle.yaml | 2 +- .github/bundles/eks/uds-bundle.yaml | 2 +- .github/bundles/rke2/uds-bundle.yaml | 2 +- .github/test-infra/aws/rke2/versions.tf | 2 +- .github/workflows/scorecard.yaml | 2 +- bundles/k3d-slim-dev/uds-bundle.yaml | 2 +- bundles/k3d-standard/uds-bundle.yaml | 2 +- tasks/create.yaml | 2 +- tasks/iac.yaml | 2 +- tasks/lint.yaml | 2 +- tasks/setup.yaml | 2 +- tasks/test.yaml | 2 +- 12 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/bundles/aks/uds-bundle.yaml b/.github/bundles/aks/uds-bundle.yaml index 1b0023366..7ff2b482d 100644 --- a/.github/bundles/aks/uds-bundle.yaml +++ b/.github/bundles/aks/uds-bundle.yaml @@ -12,7 +12,7 @@ metadata: packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.44.0 + ref: v0.45.0 - name: core path: ../../../build diff --git a/.github/bundles/eks/uds-bundle.yaml b/.github/bundles/eks/uds-bundle.yaml index f59908b6c..c0ebe2b77 100644 --- a/.github/bundles/eks/uds-bundle.yaml +++ b/.github/bundles/eks/uds-bundle.yaml @@ -12,7 +12,7 @@ metadata: packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.44.0 + ref: v0.45.0 - name: core path: ../../../build diff --git a/.github/bundles/rke2/uds-bundle.yaml b/.github/bundles/rke2/uds-bundle.yaml index 19e755bbd..db558c099 100644 --- a/.github/bundles/rke2/uds-bundle.yaml +++ b/.github/bundles/rke2/uds-bundle.yaml @@ -16,7 +16,7 @@ packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.44.0 + ref: v0.45.0 overrides: zarf-registry: docker-registry: diff --git a/.github/test-infra/aws/rke2/versions.tf b/.github/test-infra/aws/rke2/versions.tf index d636446e6..d3fcad205 100644 --- a/.github/test-infra/aws/rke2/versions.tf +++ b/.github/test-infra/aws/rke2/versions.tf @@ -6,7 +6,7 @@ terraform { } required_providers { aws = { - version = "~> 5.80.0" + version = "~> 5.81.0" } random = { version = "~> 3.6.0" diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index 5bf69f182..560b4847c 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -47,6 +47,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: Upload to code-scanning - uses: github/codeql-action/upload-sarif@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7 + uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9 with: sarif_file: results.sarif diff --git a/bundles/k3d-slim-dev/uds-bundle.yaml b/bundles/k3d-slim-dev/uds-bundle.yaml index 671a4aef5..c108ad4f2 100644 --- a/bundles/k3d-slim-dev/uds-bundle.yaml +++ b/bundles/k3d-slim-dev/uds-bundle.yaml @@ -32,7 +32,7 @@ packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.44.0 + ref: v0.45.0 - name: core-base path: ../../build/ diff --git a/bundles/k3d-standard/uds-bundle.yaml b/bundles/k3d-standard/uds-bundle.yaml index 4cfb9f09b..28e725369 100644 --- a/bundles/k3d-standard/uds-bundle.yaml +++ b/bundles/k3d-standard/uds-bundle.yaml @@ -32,7 +32,7 @@ packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.44.0 + ref: v0.45.0 - name: core path: ../../build/ diff --git a/tasks/create.yaml b/tasks/create.yaml index 6828d2792..6663a507a 100644 --- a/tasks/create.yaml +++ b/tasks/create.yaml @@ -3,7 +3,7 @@ includes: - - common: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.5.1/tasks/create.yaml + - common: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.6.0/tasks/create.yaml variables: - name: FLAVOR diff --git a/tasks/iac.yaml b/tasks/iac.yaml index a4cacafd7..cadf35fc7 100644 --- a/tasks/iac.yaml +++ b/tasks/iac.yaml @@ -22,7 +22,7 @@ tasks: - name: install-eksctl actions: - cmd: | - curl --silent --location "https://github.com/weaveworks/eksctl/releases/download/v0.198.0/eksctl_Linux_amd64.tar.gz" | tar xz -C /tmp + curl --silent --location "https://github.com/weaveworks/eksctl/releases/download/v0.199.0/eksctl_Linux_amd64.tar.gz" | tar xz -C /tmp sudo mv /tmp/eksctl /usr/local/bin - name: create-cluster diff --git a/tasks/lint.yaml b/tasks/lint.yaml index 57b0b4b46..f876a0364 100644 --- a/tasks/lint.yaml +++ b/tasks/lint.yaml @@ -2,7 +2,7 @@ # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial includes: - - remote: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.5.1/tasks/lint.yaml + - remote: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.6.0/tasks/lint.yaml tasks: - name: fix diff --git a/tasks/setup.yaml b/tasks/setup.yaml index db97ff52f..cfcc18f69 100644 --- a/tasks/setup.yaml +++ b/tasks/setup.yaml @@ -15,4 +15,4 @@ tasks: - description: "Initialize the cluster with Zarf" # renovate: datasource=github-tags depName=zarf-dev/zarf versioning=semver - cmd: "uds zarf package deploy oci://ghcr.io/zarf-dev/packages/init:v0.44.0 --confirm --no-progress" + cmd: "uds zarf package deploy oci://ghcr.io/zarf-dev/packages/init:v0.45.0 --confirm --no-progress" diff --git a/tasks/test.yaml b/tasks/test.yaml index c71eb7ba0..11f46c3d2 100644 --- a/tasks/test.yaml +++ b/tasks/test.yaml @@ -9,7 +9,7 @@ includes: - base-layer: ../packages/base/tasks.yaml - idam-layer: ../packages/identity-authorization/tasks.yaml - common-setup: https://raw.githubusercontent.com/defenseunicorns/uds-common/refs/tags/v0.13.1/tasks/setup.yaml - - compliance: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.5.1/tasks/compliance.yaml + - compliance: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.6.0/tasks/compliance.yaml tasks: - name: base