79 lines
2 KiB
JSON
79 lines
2 KiB
JSON
|
{
|
||
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
||
|
|
"$id": "https://netkingdom.local/schemas/security-scenario_v0.1.schema.json",
|
||
|
|
"title": "NetKingdom Security Scenario v0.1",
|
||
|
|
"type": "object",
|
||
|
|
"additionalProperties": false,
|
||
|
|
"required": ["id", "authority", "requires"],
|
||
|
|
"properties": {
|
||
|
|
"id": {
|
||
|
|
"type": "string",
|
||
|
|
"pattern": "^scenario:[a-z0-9][a-z0-9._:-]*$"
|
||
|
|
},
|
||
|
|
"authority": {
|
||
|
|
"enum": ["platform", "netkingdom", "tenant"]
|
||
|
|
},
|
||
|
|
"initial_trust": {
|
||
|
|
"$ref": "#/$defs/trustStates"
|
||
|
|
},
|
||
|
|
"requires": {
|
||
|
|
"type": "object",
|
||
|
|
"additionalProperties": false,
|
||
|
|
"required": ["capabilities"],
|
||
|
|
"properties": {
|
||
|
|
"capabilities": {
|
||
|
|
"type": "array",
|
||
|
|
"minItems": 1,
|
||
|
|
"uniqueItems": true,
|
||
|
|
"items": {"$ref": "#/$defs/capability"}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"providers": {
|
||
|
|
"type": "object",
|
||
|
|
"propertyNames": {"$ref": "#/$defs/capability"},
|
||
|
|
"additionalProperties": {"type": "string", "minLength": 1}
|
||
|
|
},
|
||
|
|
"parameter_overrides": {
|
||
|
|
"type": "object",
|
||
|
|
"additionalProperties": {
|
||
|
|
"type": "object"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"$defs": {
|
||
|
|
"capability": {
|
||
|
|
"enum": [
|
||
|
|
"s1.os-baseline",
|
||
|
|
"s1.secret-bootstrap",
|
||
|
|
"s2.cluster-runtime",
|
||
|
|
"s3.platform-services",
|
||
|
|
"c0.bootstrap-identity",
|
||
|
|
"c1.lightweight-sso",
|
||
|
|
"c2a.light-2fa",
|
||
|
|
"c2b.token-authority",
|
||
|
|
"c3.runtime-secrets",
|
||
|
|
"c4.fine-grained-authorization",
|
||
|
|
"c5.enterprise-federation",
|
||
|
|
"c6.self-optimizing-audit"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"trustStates": {
|
||
|
|
"type": "array",
|
||
|
|
"uniqueItems": true,
|
||
|
|
"items": {
|
||
|
|
"enum": [
|
||
|
|
"bare_host_trust",
|
||
|
|
"cluster_trust",
|
||
|
|
"bootstrap_secret_trust",
|
||
|
|
"bootstrap_identity_trust",
|
||
|
|
"runtime_secret_trust",
|
||
|
|
"runtime_identity_trust",
|
||
|
|
"runtime_authorization_trust",
|
||
|
|
"tenant_onboarding_trust"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|