Security Chain Onboarding Document¶
This outlines the step-by-step process for securely onboarding delegates in the security chain.
1. Legal Agreement¶
A formal legal contract is signed between the collaborating organizations to establish terms and responsibilities.
2. Delegate Selection and Identity Verification¶
- Each organization selects a delegate.
- The delegate's identity is verified through the organization's internal processes to ensure authenticity.
3. Federated Identity Management Integration¶
- The identity management system used leverages federated access to the organization's Identity Provider (IdP).
- This enables secure Single Sign-On (SSO) for seamless authentication to the environment.
4. Access Provisioning¶
- The swarm orchestrator provides the delegate with:
- Access to the organizations Git repository by adding the identity to the respective git project. This also gives permissions for the private container registry.
5. Repository Retrieval and Bootstrap Initiation¶
- The delegate retrieves the Git repository into a Virtual Machine (VM) provisioned for this purpose.
- The bootstrap process is initiated from the VM.
6. Automated Environment Setup¶
- The bootstrap process performs:
- Joins the control network.
- Automatically starts swarm containers.
- Boots up all Swarm containers.
- This provides a ready-to-use environment for the Swarm member for use for the Swarm training.
The onboarding sequence ensures secure, efficient, and federated access while maintaining operational integrity across organizational boundaries.