From 72b6875d15decca9bd36239af5339a1b237ff338 Mon Sep 17 00:00:00 2001 From: Instrumental Date: Fri, 25 May 2018 21:16:21 -0500 Subject: [PATCH] Adjust Security Pictures Issue-ID: AAF-331 Change-Id: Ife0c6664c6cd7911dbcb61907590b26d097e9b3e Signed-off-by: Instrumental --- .../architecture/images/SecurityArchCADIClient.svg | 70 ++++++++++++++++++++++ .../architecture/images/SecurityArchFull.svg | 22 ++++++- docs/sections/architecture/security.rst | 5 ++ 3 files changed, 96 insertions(+), 1 deletion(-) create mode 100644 docs/sections/architecture/images/SecurityArchCADIClient.svg diff --git a/docs/sections/architecture/images/SecurityArchCADIClient.svg b/docs/sections/architecture/images/SecurityArchCADIClient.svg new file mode 100644 index 00000000..66ab0737 --- /dev/null +++ b/docs/sections/architecture/images/SecurityArchCADIClient.svg @@ -0,0 +1,70 @@ + + + + + + X509 Client + + + X509 Client + + + or BasicAuth + + + + + + + + CADI Filter + + + + + + + + + CADI Filter + + + + + Application + Two + + + + + + User One + (Person) + + + + HTTP/S + + + + + + + + + + + Application + One + + + HTTP/S + + + + + Utilize CADI Client REST client (auto + loads credentials, Contexts, etc) + + + diff --git a/docs/sections/architecture/images/SecurityArchFull.svg b/docs/sections/architecture/images/SecurityArchFull.svg index 0093eaa1..f25fd0c2 100644 --- a/docs/sections/architecture/images/SecurityArchFull.svg +++ b/docs/sections/architecture/images/SecurityArchFull.svg @@ -1,6 +1,6 @@ - + @@ -192,6 +192,20 @@ Organizationally Defined + + + TLS 1.2+ + + + TLS 1.2+ + + + HTTP/S + + + HTTP/S + + X509 Client @@ -252,4 +266,10 @@ HTTP/S + + + Utilize CADI Client REST client (auto + loads credentials, Contexts, etc) + + diff --git a/docs/sections/architecture/security.rst b/docs/sections/architecture/security.rst index 7c4ef85d..93247899 100644 --- a/docs/sections/architecture/security.rst +++ b/docs/sections/architecture/security.rst @@ -93,6 +93,11 @@ In order to do this efficiently, ONAP services will use the CADI Client, which i * Highly scalable Endpoint information (at the very least, of AAF components) * The ability to propogate the Identity of originating Caller (User One) +.. image:: images/SecurityArchCADIClient.svg + :width: 70% + :align: center + + Obtaining Security Information ------------------------------ -- 2.16.6