Home Explore Help
Sign In
logic855
/
helm-external-secrets
mirror of https://github.com/external-secrets/external-secrets
1
0
Fork 0
Files Issues 0 Wiki
Tree: f32ea9f91d
Branches Tags
helm-externa...
/
docs
/
pictures
/
eso-threat-model.drawio

eso-threat-model.drawio 19 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209 
  1. <mxfile host="app.diagrams.net" modified="2023-06-08T07:50:48.059Z" agent="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" etag="rknZ4nRD0hLUAzhrPp6X" version="21.3.7" type="device" pages="2">
    2. 

  2.   <diagram name="Overview" id="Bc-KUSc10sxP7uZ9etOK">
    3. 

  3.     <mxGraphModel dx="1388" dy="702" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="827" pageHeight="1169" math="0" shadow="0">
    4. 

  4.       <root>
    5. 

  5.         <mxCell id="0" />
    6. 

  6.         <mxCell id="1" parent="0" />
    7. 

  7.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-10" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;dashed=1;" parent="1" vertex="1">
    8. 

  8.           <mxGeometry x="540" y="381.26" width="180" height="100" as="geometry" />
    9. 

  9.         </mxCell>
    10. 

  10.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-8" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;dashed=1;" parent="1" vertex="1">
    11. 

  11.           <mxGeometry x="200" y="740" width="320" height="100" as="geometry" />
    12. 

  12.         </mxCell>
    13. 

  13.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-7" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;dashed=1;strokeColor=#6c8ebf;" parent="1" vertex="1">
    14. 

  14.           <mxGeometry x="110" y="550" width="700" height="100" as="geometry" />
    15. 

  15.         </mxCell>
    16. 

  16.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-14" value="conversion/&lt;br&gt;validating webhook" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.164;exitY=-0.031;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;exitPerimeter=0;labelBackgroundColor=none;" parent="1" source="-eq3P-sCqOfjKJ7X8hlF-1" target="-eq3P-sCqOfjKJ7X8hlF-2" edge="1">
    17. 

  17.           <mxGeometry x="0.1204" y="47" relative="1" as="geometry">
    18. 

  18.             <mxPoint x="7" y="25" as="offset" />
    19. 

  19.           </mxGeometry>
    20. 

  20.         </mxCell>
    21. 

  21.         <mxCell id="KWlXfnC0i22sAb0q6HPk-8" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" parent="1" source="-eq3P-sCqOfjKJ7X8hlF-1" target="-eq3P-sCqOfjKJ7X8hlF-11" edge="1">
    22. 

  22.           <mxGeometry relative="1" as="geometry" />
    23. 

  23.         </mxCell>
    24. 

  24.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-1" value="kube-apiserver" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
    25. 

  25.           <mxGeometry x="220" y="760" width="120" height="60" as="geometry" />
    26. 

  26.         </mxCell>
    27. 

  27.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-2" value="webhook" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
    28. 

  28.           <mxGeometry x="160" y="570" width="120" height="60" as="geometry" />
    29. 

  29.         </mxCell>
    30. 

  30.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-15" value="TLS bootstrap &lt;br&gt;&amp;amp; init webhook" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" parent="1" source="-eq3P-sCqOfjKJ7X8hlF-3" target="-eq3P-sCqOfjKJ7X8hlF-1" edge="1">
    31. 

  31.           <mxGeometry x="-0.32" y="18" relative="1" as="geometry">
    32. 

  32.             <Array as="points">
    33. 

  33.               <mxPoint x="390" y="670" />
    34. 

  34.               <mxPoint x="280" y="670" />
    35. 

  35.             </Array>
    36. 

  36.             <mxPoint as="offset" />
    37. 

  37.           </mxGeometry>
    38. 

  38.         </mxCell>
    39. 

  39.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-3" value="cert-controller" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
    40. 

  40.           <mxGeometry x="360" y="570" width="120" height="60" as="geometry" />
    41. 

  41.         </mxCell>
    42. 

  42.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-12" value="read / write secrets" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=0;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" parent="1" source="-eq3P-sCqOfjKJ7X8hlF-4" target="-eq3P-sCqOfjKJ7X8hlF-9" edge="1">
    43. 

  43.           <mxGeometry relative="1" as="geometry" />
    44. 

  44.         </mxCell>
    45. 

  45.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-13" value="reconcile state" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.75;entryY=0;entryDx=0;entryDy=0;" parent="1" source="-eq3P-sCqOfjKJ7X8hlF-4" target="-eq3P-sCqOfjKJ7X8hlF-1" edge="1">
    46. 

  46.           <mxGeometry x="0.0068" y="-8" relative="1" as="geometry">
    47. 

  47.             <mxPoint x="420" y="759.9999999999998" as="targetPoint" />
    48. 

  48.             <Array as="points">
    49. 

  49.               <mxPoint x="612" y="721" />
    50. 

  50.               <mxPoint x="310" y="721" />
    51. 

  51.             </Array>
    52. 

  52.             <mxPoint as="offset" />
    53. 

  53.           </mxGeometry>
    54. 

  54.         </mxCell>
    55. 

  55.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-4" value="core controller" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
    56. 

  56.           <mxGeometry x="560" y="570" width="120" height="60" as="geometry" />
    57. 

  57.         </mxCell>
    58. 

  58.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-6" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" parent="1" source="-eq3P-sCqOfjKJ7X8hlF-5" target="-eq3P-sCqOfjKJ7X8hlF-1" edge="1">
    59. 

  59.           <mxGeometry relative="1" as="geometry" />
    60. 

  60.         </mxCell>
    61. 

  61.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-5" value="Developer/&lt;br&gt;Admin" style="shape=umlActor;verticalLabelPosition=bottom;verticalAlign=top;html=1;outlineConnect=0;" parent="1" vertex="1">
    62. 

  62.           <mxGeometry x="265" y="890" width="30" height="60" as="geometry" />
    63. 

  63.         </mxCell>
    64. 

  64.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-9" value="Secret Provider" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
    65. 

  65.           <mxGeometry x="560" y="401.26" width="120" height="60" as="geometry" />
    66. 

  66.         </mxCell>
    67. 

  67.         <mxCell id="-eq3P-sCqOfjKJ7X8hlF-11" value="etcd" style="rounded=0;whiteSpace=wrap;html=1;" parent="1" vertex="1">
    68. 

  68.           <mxGeometry x="380" y="760" width="120" height="60" as="geometry" />
    69. 

  69.         </mxCell>
    70. 

  70.         <mxCell id="KWlXfnC0i22sAb0q6HPk-1" value="Security Assets&lt;br&gt;&lt;br&gt;&lt;table cellpadding=&quot;4&quot; style=&quot;border: 1px solid rgb(102, 102, 102); border-collapse: collapse; background-color: rgb(255, 229, 153);&quot; border=&quot;1&quot;&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style=&quot;border-collapse: collapse;&quot; border=&quot;1&quot;&gt;&lt;b&gt;ID&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&lt;b&gt;Description&lt;/b&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;A01&lt;/td&gt;&lt;td&gt;cluster-level secret read/write access&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;A02&lt;/td&gt;&lt;td&gt;CRD &amp;amp; webhook write access&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;A03&lt;/td&gt;&lt;td&gt;secret provider access&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;A04&lt;/td&gt;&lt;td&gt;capability to modify resources (conversion)&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;" style="text;html=1;align=center;verticalAlign=middle;resizable=0;points=[];autosize=1;strokeColor=none;fillColor=none;" parent="1" vertex="1">
    71. 

  71.           <mxGeometry x="845" y="550" width="290" height="160" as="geometry" />
    72. 

  72.         </mxCell>
    73. 

  73.         <mxCell id="KWlXfnC0i22sAb0q6HPk-2" value="Security Controls&lt;br&gt;&lt;br&gt;&lt;table cellpadding=&quot;4&quot; style=&quot;border: 1px solid rgb(102, 102, 102); border-collapse: collapse; background-color: rgb(185, 224, 165);&quot; border=&quot;1&quot;&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style=&quot;border-collapse: collapse;&quot; border=&quot;1&quot;&gt;&lt;b&gt;ID&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&lt;b&gt;Description&lt;/b&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;C01&lt;/td&gt;&lt;td&gt;Network Security Policy (*)&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;C02&lt;/td&gt;&lt;td&gt;Least Privilege RBAC&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;C03&lt;/td&gt;&lt;td&gt;Policy Enforcement (*)&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;C04&lt;/td&gt;&lt;td&gt;Provider Access Policy&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;C05&lt;/td&gt;&lt;td&gt;disable CRDs&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;&lt;span style=&quot;white-space: pre;&quot;&gt;&#x9;&lt;/span&gt;" style="text;html=1;align=center;verticalAlign=middle;resizable=0;points=[];autosize=1;strokeColor=none;fillColor=none;" parent="1" vertex="1">
    74. 

  74.           <mxGeometry x="885" y="710" width="210" height="200" as="geometry" />
    75. 

  75.         </mxCell>
    76. 

  76.         <mxCell id="KWlXfnC0i22sAb0q6HPk-3" value="Security Threats&lt;br&gt;&lt;br&gt;&lt;table cellpadding=&quot;4&quot; style=&quot;border: 1px solid rgb(102, 102, 102); border-collapse: collapse; background-color: rgb(248, 206, 204);&quot; border=&quot;1&quot;&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td style=&quot;border-collapse: collapse;&quot; border=&quot;1&quot;&gt;&lt;b&gt;ID&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&lt;b&gt;Description&lt;/b&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;T01&lt;/td&gt;&lt;td&gt;tampering with resources through MITM&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;T02&lt;/td&gt;&lt;td&gt;Webhook DOS&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;T03&lt;/td&gt;&lt;td&gt;unauthorised access to cluster secrets&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;T04&lt;/td&gt;&lt;td&gt;unauthorised access to provider secrets&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;T05&lt;/td&gt;&lt;td&gt;data exfiltration through malicious resources&amp;nbsp;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;T06&lt;/td&gt;&lt;td&gt;supply chain attacks&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;T07&lt;/td&gt;&lt;td&gt;malicious workloads in eso namespace&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;" style="text;html=1;align=center;verticalAlign=middle;resizable=0;points=[];autosize=1;strokeColor=none;fillColor=none;" parent="1" vertex="1">
    77. 

  77.           <mxGeometry x="840" y="305" width="300" height="230" as="geometry" />
    78. 

  78.         </mxCell>
    79. 

  79.         <mxCell id="KWlXfnC0i22sAb0q6HPk-4" value="A01" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#fff2cc;strokeColor=#d6b656;" parent="1" vertex="1">
    80. 

  80.           <mxGeometry x="680" y="570" width="30" height="20" as="geometry" />
    81. 

  81.         </mxCell>
    82. 

  82.         <mxCell id="KWlXfnC0i22sAb0q6HPk-6" value="A02" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#fff2cc;strokeColor=#d6b656;" parent="1" vertex="1">
    83. 

  83.           <mxGeometry x="480" y="570" width="30" height="20" as="geometry" />
    84. 

  84.         </mxCell>
    85. 

  85.         <mxCell id="KWlXfnC0i22sAb0q6HPk-7" value="A03" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#fff2cc;strokeColor=#d6b656;" parent="1" vertex="1">
    86. 

  86.           <mxGeometry x="710" y="570" width="30" height="20" as="geometry" />
    87. 

  87.         </mxCell>
    88. 

  88.         <mxCell id="KWlXfnC0i22sAb0q6HPk-9" value="C01" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" parent="1" vertex="1">
    89. 

  89.           <mxGeometry x="680" y="590" width="30" height="20" as="geometry" />
    90. 

  90.         </mxCell>
    91. 

  91.         <mxCell id="KWlXfnC0i22sAb0q6HPk-10" value="C01" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" parent="1" vertex="1">
    92. 

  92.           <mxGeometry x="480" y="590" width="30" height="20" as="geometry" />
    93. 

  93.         </mxCell>
    94. 

  94.         <mxCell id="KWlXfnC0i22sAb0q6HPk-11" value="C01" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" parent="1" vertex="1">
    95. 

  95.           <mxGeometry x="280" y="590" width="30" height="20" as="geometry" />
    96. 

  96.         </mxCell>
    97. 

  97.         <mxCell id="KWlXfnC0i22sAb0q6HPk-12" value="A04" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#fff2cc;strokeColor=#d6b656;" parent="1" vertex="1">
    98. 

  98.           <mxGeometry x="280" y="570" width="30" height="20" as="geometry" />
    99. 

  99.         </mxCell>
    100. 

  100.         <mxCell id="KWlXfnC0i22sAb0q6HPk-13" value="T01" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#b85450;" parent="1" vertex="1">
    101. 

  101.           <mxGeometry x="280" y="610" width="30" height="20" as="geometry" />
    102. 

  102.         </mxCell>
    103. 

  103.         <mxCell id="KWlXfnC0i22sAb0q6HPk-15" value="T02" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#b85450;" parent="1" vertex="1">
    104. 

  104.           <mxGeometry x="480" y="610" width="30" height="20" as="geometry" />
    105. 

  105.         </mxCell>
    106. 

  106.         <mxCell id="KWlXfnC0i22sAb0q6HPk-17" value="T03" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#b85450;" parent="1" vertex="1">
    107. 

  107.           <mxGeometry x="680" y="610" width="30" height="20" as="geometry" />
    108. 

  108.         </mxCell>
    109. 

  109.         <mxCell id="KWlXfnC0i22sAb0q6HPk-19" value="C02" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" parent="1" vertex="1">
    110. 

  110.           <mxGeometry x="710" y="590" width="30" height="20" as="geometry" />
    111. 

  111.         </mxCell>
    112. 

  112.         <mxCell id="KWlXfnC0i22sAb0q6HPk-20" value="C02" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" parent="1" vertex="1">
    113. 

  113.           <mxGeometry x="510" y="590" width="30" height="20" as="geometry" />
    114. 

  114.         </mxCell>
    115. 

  115.         <mxCell id="KWlXfnC0i22sAb0q6HPk-21" value="C02" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" parent="1" vertex="1">
    116. 

  116.           <mxGeometry x="310" y="590" width="30" height="20" as="geometry" />
    117. 

  117.         </mxCell>
    118. 

  118.         <mxCell id="KWlXfnC0i22sAb0q6HPk-18" value="T04" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#b85450;" parent="1" vertex="1">
    119. 

  119.           <mxGeometry x="710" y="610" width="30" height="20" as="geometry" />
    120. 

  120.         </mxCell>
    121. 

  121.         <mxCell id="Ww5IvjzXZUh7UzVtdnaJ-2" value="C03" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" parent="1" vertex="1">
    122. 

  122.           <mxGeometry x="740" y="590" width="30" height="20" as="geometry" />
    123. 

  123.         </mxCell>
    124. 

  124.         <mxCell id="dCErDjv6PzuvUg3lQw2a-1" value="T06" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#b85450;" parent="1" vertex="1">
    125. 

  125.           <mxGeometry x="110" y="550" width="30" height="20" as="geometry" />
    126. 

  126.         </mxCell>
    127. 

  127.         <mxCell id="dCErDjv6PzuvUg3lQw2a-2" value="T07" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#b85450;" parent="1" vertex="1">
    128. 

  128.           <mxGeometry x="110" y="570" width="30" height="20" as="geometry" />
    129. 

  129.         </mxCell>
    130. 

  130.         <mxCell id="dCErDjv6PzuvUg3lQw2a-4" value="C04" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" parent="1" vertex="1">
    131. 

  131.           <mxGeometry x="680" y="421.26" width="30" height="20" as="geometry" />
    132. 

  132.         </mxCell>
    133. 

  133.         <mxCell id="KWlXfnC0i22sAb0q6HPk-14" value="T02" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#b85450;" parent="1" vertex="1">
    134. 

  134.           <mxGeometry x="310" y="610" width="30" height="20" as="geometry" />
    135. 

  135.         </mxCell>
    136. 

  136.         <mxCell id="Ww5IvjzXZUh7UzVtdnaJ-1" value="T05" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#b85450;" parent="1" vertex="1">
    137. 

  137.           <mxGeometry x="740" y="610" width="30" height="20" as="geometry" />
    138. 

  138.         </mxCell>
    139. 

  139.         <mxCell id="dCErDjv6PzuvUg3lQw2a-3" value="T05" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#b85450;" parent="1" vertex="1">
    140. 

  140.           <mxGeometry x="680" y="441.26" width="30" height="20" as="geometry" />
    141. 

  141.         </mxCell>
    142. 

  142.         <mxCell id="pWq7YGlfomeq9d_JThvH-1" value="C05" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
    143. 

  143.           <mxGeometry x="770" y="590" width="30" height="20" as="geometry" />
    144. 

  144.         </mxCell>
    145. 

  145.       </root>
    146. 

  146.     </mxGraphModel>
    147. 

  147.   </diagram>
    148. 

  148.   <diagram id="cfY7S7NFl4qge9Uy_So4" name="TLS Bootstrap">
    149. 

  149.     <mxGraphModel dx="844" dy="489" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="827" pageHeight="1169" math="0" shadow="0">
    150. 

  150.       <root>
    151. 

  151.         <mxCell id="0" />
    152. 

  152.         <mxCell id="1" parent="0" />
    153. 

  153.         <mxCell id="adGjIOf3ydgdso1pvlvY-2" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;dashed=1;" vertex="1" parent="1">
    154. 

  154.           <mxGeometry x="200" y="740" width="300" height="100" as="geometry" />
    155. 

  155.         </mxCell>
    156. 

  156.         <mxCell id="adGjIOf3ydgdso1pvlvY-3" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;dashed=1;strokeColor=#6c8ebf;" vertex="1" parent="1">
    157. 

  157.           <mxGeometry x="160" y="550" width="440" height="100" as="geometry" />
    158. 

  158.         </mxCell>
    159. 

  159.         <mxCell id="adGjIOf3ydgdso1pvlvY-4" value="5. send conversion/validating&lt;br&gt;&amp;nbsp;webhook" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.164;exitY=-0.031;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;exitPerimeter=0;" edge="1" parent="1" source="adGjIOf3ydgdso1pvlvY-5" target="adGjIOf3ydgdso1pvlvY-6">
    160. 

  160.           <mxGeometry x="-0.0951" y="80" relative="1" as="geometry">
    161. 

  161.             <mxPoint as="offset" />
    162. 

  162.           </mxGeometry>
    163. 

  163.         </mxCell>
    164. 

  164.         <mxCell id="adGjIOf3ydgdso1pvlvY-5" value="kube-apiserver" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
    165. 

  165.           <mxGeometry x="220" y="760" width="120" height="60" as="geometry" />
    166. 

  166.         </mxCell>
    167. 

  167.         <mxCell id="adGjIOf3ydgdso1pvlvY-6" value="webhook" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
    168. 

  168.           <mxGeometry x="180" y="570" width="120" height="60" as="geometry" />
    169. 

  169.         </mxCell>
    170. 

  170.         <mxCell id="adGjIOf3ydgdso1pvlvY-7" value="2. write TLS secret&lt;br&gt;3. update caBundle in CRD/Webhook" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;align=left;" edge="1" parent="1" source="adGjIOf3ydgdso1pvlvY-8" target="adGjIOf3ydgdso1pvlvY-5">
    171. 

  171.           <mxGeometry x="0.4" y="10" relative="1" as="geometry">
    172. 

  172.             <Array as="points">
    173. 

  173.               <mxPoint x="350" y="670" />
    174. 

  174.               <mxPoint x="280" y="670" />
    175. 

  175.             </Array>
    176. 

  176.             <mxPoint as="offset" />
    177. 

  177.           </mxGeometry>
    178. 

  178.         </mxCell>
    179. 

  179.         <mxCell id="adGjIOf3ydgdso1pvlvY-8" value="cert-controller" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
    180. 

  180.           <mxGeometry x="320" y="570" width="120" height="60" as="geometry" />
    181. 

  181.         </mxCell>
    182. 

  182.         <mxCell id="adGjIOf3ydgdso1pvlvY-11" value="core controller" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
    183. 

  183.           <mxGeometry x="460" y="570" width="120" height="60" as="geometry" />
    184. 

  184.         </mxCell>
    185. 

  185.         <mxCell id="adGjIOf3ydgdso1pvlvY-15" value="etcd" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
    186. 

  186.           <mxGeometry x="360" y="760" width="120" height="60" as="geometry" />
    187. 

  187.         </mxCell>
    188. 

  188.         <mxCell id="qu5wcJP0yzF1II28N2AH-1" value="1. gen private key / self-signed cert" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=0;exitDx=0;exitDy=0;entryX=0.75;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="adGjIOf3ydgdso1pvlvY-8" target="adGjIOf3ydgdso1pvlvY-8">
    189. 

  189.           <mxGeometry y="10" relative="1" as="geometry">
    190. 

  190.             <Array as="points">
    191. 

  191.               <mxPoint x="350" y="530" />
    192. 

  192.               <mxPoint x="410" y="530" />
    193. 

  193.             </Array>
    194. 

  194.             <mxPoint as="offset" />
    195. 

  195.           </mxGeometry>
    196. 

  196.         </mxCell>
    197. 

  197.         <mxCell id="qu5wcJP0yzF1II28N2AH-2" value="4. configure TLS" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=0;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="adGjIOf3ydgdso1pvlvY-6" target="adGjIOf3ydgdso1pvlvY-6">
    198. 

  198.           <mxGeometry x="-0.0182" y="12" relative="1" as="geometry">
    199. 

  199.             <Array as="points">
    200. 

  200.               <mxPoint x="210" y="530" />
    201. 

  201.               <mxPoint x="240" y="530" />
    202. 

  202.             </Array>
    203. 

  203.             <mxPoint as="offset" />
    204. 

  204.           </mxGeometry>
    205. 

  205.         </mxCell>
    206. 

  206.       </root>
    207. 

  207.     </mxGraphModel>
    208. 

  208.   </diagram>
    209. 

  209. </mxfile>
    210.