0

sig-security

?CNCF Special Interest Group on Security -- secure access, policy control, privacy, auditing, explainability and more!

Official Site
Github repo
Main metrics

Github stars Tracking Chart

CNCF Special Interest Group for Security (SIG-Security)

Objective

SIG-Security facilitates collaboration to discover and produce resources which enable secure access, policy control and safety for operators, administrators, developers, and end-users across the cloud native ecosystem.

Background

“Cloud Native” is open source cloud computing for applications — a complete trusted toolkit for modern architectures (CNCF presentation). There are multiple projects which address key parts of the problem of providing access controls and addressing safety concerns. Each of these adds value, yet for these technical solutions to be capable of working well together and manageable to operate they will need a minimal shared context of what defines a secure system architecture.

Vision

There is a future where operators, administrators and developers feel confident creating new cloud native applications. They use cloud technologies with clear understanding of risks and the ability to validate that their security policy decisions are reflected in deployed software.

We envision that there could exist an ecosystem of tools that can simplify the experience of cloud native operators, administrators and developers, including:

  1. System security architecture that understands and accommodates the ever
    growing heterogeneity of systems and provides a framework to protect resources
    and data while servicing their users
  2. Common vocabulary and open source libraries that make it easy for developers
    to create and deploy apps that meet system security requirements
  3. Common libraries and protocols that enable people to reason about the
    security of the system, such as auditing and explainability features.

Governance

SIG-Security charter outlines the scope of our group activities, as part of our governance process which details how we work.

Communications

Anyone is welcome to join our open discussions of SIG-Security projects and share news related to the group's mission and charter. Much of the work of the group happens outside of SIG-Security meetings and we encourage project teams to share progress updates or post questions in these channels:

Meeting times

The Security SIG group meets every Wednesday at 10:00am PT (USA Pacific, see your timezone here):

One tap mobile:

  • +16465588656,,7375677271# US (New York)
  • +16699006833,,7375677271# US (San Jose)

Dial by your location:

  • +1 646 558 8656 US (New York)
  • +1 669 900 6833 US (San Jose)
  • 877 369 0926 US Toll-free
  • 855 880 1246 US Toll-free
    Meeting ID: 737 567 7271
    Find your local number: https://zoom.us/u/alwlmxlNn

In person meetings

Please let us know if you are going and if you are interested in attending (or helping to organize!) an in-person meetup. Create a github issue for an event and add to list below:

  • KubeCon + CloudNativeCon, San Diego, CA - Nov 18 – 21, 2019 - [issue#128]

Past events

New members

If you are new to the group, check out our New Members Page and submit a PR to add yourself to the members list.

History

Members

SIG Chairs

  • Dan Shaw (@dshaw), PayPal [Chair - term: 6/3/2019 - 6/3/2020]
  • Sarah Allen (@ultrasaurus), [Chair - term: 6/3/2019 - 6/3/2021]
  • Jeyappragash JJ (@pragashj), Tetrate.io [Chair - term: 6/3/2019 - 6/3/2021]

On-going projects

Policy team

Policy is an essential component of a secure system.

Bi-weekly meetings at 3:00pm PT
focus on policy concerns and initiatives.

Co-leads

  • Howard Huang (@hannibalhuang), Huawei [Kubernetes Policy WG co-chair]
  • Erica von Buelow (@ericavonb), Red Hat [Kubernetes Policy WG]

Co-chair representative: @pragashj

Security assessments

Security assessments are a collaborative process for the
benefit of cloud native projects and prospective users by creating a consistent
overview of the project and its risk profile.

Facilitator: Justin Cappos (@JustinCappos),
New York University

Co-chair representative: @ultrasaurus

SIG members

Membership governance can be viewed here. If you are new, check out the New Members Page.

Additional information

Past events and meetings

For more details on past events and meetings, please see our past events page

Main metrics

Overview
Name With Ownercncf/tag-security
Primary LanguageHTML
Program languageMakefile (Language Count: 7)
Platform
License:Other
所有者活动
Created At2018-03-13 22:30:42
Pushed At2025-06-04 12:06:01
Last Commit At
Release Count0
用户参与
Stargazers Count2.2k
Watchers Count156
Fork Count548
Commits Count2.5k
Has Issues Enabled
Issues Count563
Issue Open Count27
Pull Requests Count765
Pull Requests Open Count5
Pull Requests Close Count131
项目设置
Has Wiki Enabled
Is Archived
Is Fork
Is Locked
Is Mirror
Is Private