Description: If a malicious actor could circumvent webhook authentication, they could send unauthorized requests.
Impact: The webhook performs validation only and does not mutate any state. It's unclear what the security impact would be of spoofing.
Mitigations:
From Thomas in GH Issue: To deploy applications successfully, there are efforts that often go hand in hand with infrastructure provisioning and deployment. As we see more projects from the infrastructure space in our TAG and identified (at a poll at KubeCon) that we should get more active in this area, there should be first investigations if it makes sense to build a working group for such topics, if there are enough interested people in this and what the potential scope of the WG could be.
As the Cloud space and CloudNative has gotten more mature, there are increasingly complex hybrid environments that do not run solely within the cloud. This can be a mixture of on-prem physical infrastructure, public/private cloud, and Edge/IOT. Various end-users are adopting CloudNative practices to modernize their stack with different levels of maturity.
Modern cloud-native applications depend on a variety of software infrastructure such as Kubernetes clusters, virtual networks, database servers, API gateways, or mac
Context: assessing the CNCF landscape to understand where Radius could integrate and leverage other CNCF projects. The end goal is to drive adoption of Radius via reach into other user communities.
I'm using this query to navigate the landscape. This query filters out non-CNCF projects that are on the landscape as well as CNCF archived (abandoned). I'm including sandbox projects in the analysis, but giving them lower weight than more mature projects. Our goal is to drive adoption of Radius, and sandbox projects will not have a significant user community attached.
Of the projects on the landscape, I thought XXX of them deserved serious consideration and thought. For many projects, while they are valuable, are just not relevant to Radius (eg: OperatorFramework) For projects that could be relevant with an increased scope (eg: Copacetic or Buildpacks) I'm including them in their own section. I'm
Radius endeavors to provide rich resource audit and lifecycle management features for all kinds of resources. Radius can help the whole organization reason about their applications, the architectures and dependencies of those applications, and the cloud infrastructure that runs those applications.
In particular we're inspired by the capabilities of ARM (Azure Resource Manager) and we're generalizing those features to apply to all clouds. The ARM feature that users consistently rate as valuable is resource groups. Resource groups provide a way to list related resources, and to perform operations like RBAC assignment on the list rather than individual resources. Users can use resource groups to organize, audit and bulk-delete resources with a related lifecycle. While we often market Radius with statements like "graphs are better than list", it doesn't mean that the list is obsolete - they serve an important mechanical purpose.
Our vision for resource groups in Radius/UCP is that they pr
@rynowak)To adopt Radius, we ask users to describe their application using Bicep and Radius' application model. Moving customer workloads to Radius' application model supports our strategy for the project, we're trying to evangelize a broadly-applicable cloud-native abstraction and then build multiple implementations of that abstraction. As the end goal: users that adopt Radius can seamlessly move between Kubernetes, on-premises platforms, and serverless hosting platforms provided by various clouds. Unfortunately migrating existing applications complicated and dangerous work. To make that worse, few customers actually need the kind of hosting platform portability we're planning, and we're a long ways off from building it. We believe that these factors explain much of the hesitation we're seeing from customers when they have experienced the problems that Radius is solving, but don't become enthusiastic a
Visual aids: