├── .gitignore ├── LICENSE ├── README.md ├── doc ├── files │ ├── load_balancer_setup.yaml │ └── security-server-sidecar-network-policy-examples.yaml ├── img │ ├── ig-load_balancer_deploy.svg │ ├── ig-single-pod-service.svg │ ├── ig-single_pod_external_database.svg │ ├── ig-single_pod_local_database.svg │ ├── ig-ss_external_db.svg │ ├── ig-ss_local_db.svg │ ├── security_server_sidecar.png │ ├── ss_high_availability.svg │ └── xroad_logo_small.png ├── kubernetes_security_guide.md ├── kubernetes_security_server_sidecar_user_guide.md ├── security_server_sidecar_security_guide.md └── security_server_sidecar_user_guide.md └── sidecar ├── .dockerignore ├── Dockerfile ├── Dockerfile-variant ├── docker-build.sh ├── files ├── _entrypoint_common.sh ├── addons │ ├── messagelog-archiver-logback.xml │ └── monitor-logback.xml ├── balancer-primary-entrypoint.sh ├── balancer-secondary-entrypoint.sh ├── confclient-logback-service.xml ├── confclient-logback.xml ├── custom-fetch-pin.sh ├── op-monitor-logback.xml ├── override-docker.ini ├── primary-slim-ss-xroad.conf ├── primary-ss-xroad.conf ├── proxy-logback.xml ├── proxy-ui-api-logback.xml ├── secondary-slim-ss-xroad.conf ├── secondary-ss-xroad.conf ├── signer-console-logback.xml ├── signer-logback.xml ├── slim-ss-entrypoint.sh ├── slim-ss-xroad.conf ├── ss-entrypoint.sh ├── ss-xroad.conf ├── variables-logback.properties └── xroad-slave-sync.logrotate ├── jenkins └── pipelines │ ├── aws-eks-add-authorize-keys │ ├── aws-eks-create-sidecar-cluster │ ├── aws-eks-delete-sidecar-cluster │ ├── aws-eks-grant-iam-access-to-cluster │ ├── docker-build-all-security-server-sidecar │ ├── docker-build-security-server-sidecar │ ├── docker-publish-all-security-server-sidecar │ ├── docker-publish-security-server-sidecar-image │ ├── kubernetes-delete-security-server-sidecar │ ├── kubernetes-delete-security-server-sidecar-slim │ ├── kubernetes-deploy-security-server-sidecar │ ├── kubernetes-deploy-security-server-sidecar-fi │ ├── kubernetes-test-deploy-consumer-provider │ └── kubernetes-update-nodes-security-server-sidecar ├── kubernetes ├── grant-user-access-to-cluster.sh ├── security-server-sidecar-local.yaml ├── security-server-sidecar-restrictive-psp.yaml ├── security-server-sidecar-slim.yaml ├── security-server-sidecar-slim.yaml.template ├── security-server-sidecar.yaml ├── security-server-sidecar.yaml.template └── testRequest.xml ├── kubernetesBalancer ├── primary │ └── Dockerfile ├── secondary │ └── Dockerfile └── slim │ ├── primary │ └── Dockerfile │ └── secondary │ └── Dockerfile └── slim └── Dockerfile /.gitignore: -------------------------------------------------------------------------------- 1 | .idea/ -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/README.md -------------------------------------------------------------------------------- /doc/files/load_balancer_setup.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/files/load_balancer_setup.yaml -------------------------------------------------------------------------------- /doc/files/security-server-sidecar-network-policy-examples.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/files/security-server-sidecar-network-policy-examples.yaml -------------------------------------------------------------------------------- /doc/img/ig-load_balancer_deploy.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/img/ig-load_balancer_deploy.svg -------------------------------------------------------------------------------- /doc/img/ig-single-pod-service.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/img/ig-single-pod-service.svg -------------------------------------------------------------------------------- /doc/img/ig-single_pod_external_database.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/img/ig-single_pod_external_database.svg -------------------------------------------------------------------------------- /doc/img/ig-single_pod_local_database.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/img/ig-single_pod_local_database.svg -------------------------------------------------------------------------------- /doc/img/ig-ss_external_db.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/img/ig-ss_external_db.svg -------------------------------------------------------------------------------- /doc/img/ig-ss_local_db.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/img/ig-ss_local_db.svg -------------------------------------------------------------------------------- /doc/img/security_server_sidecar.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/img/security_server_sidecar.png -------------------------------------------------------------------------------- /doc/img/ss_high_availability.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/img/ss_high_availability.svg -------------------------------------------------------------------------------- /doc/img/xroad_logo_small.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/img/xroad_logo_small.png -------------------------------------------------------------------------------- /doc/kubernetes_security_guide.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/kubernetes_security_guide.md -------------------------------------------------------------------------------- /doc/kubernetes_security_server_sidecar_user_guide.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/kubernetes_security_server_sidecar_user_guide.md -------------------------------------------------------------------------------- /doc/security_server_sidecar_security_guide.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/security_server_sidecar_security_guide.md -------------------------------------------------------------------------------- /doc/security_server_sidecar_user_guide.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/doc/security_server_sidecar_user_guide.md -------------------------------------------------------------------------------- /sidecar/.dockerignore: -------------------------------------------------------------------------------- 1 | * 2 | !files/ 3 | -------------------------------------------------------------------------------- /sidecar/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/Dockerfile -------------------------------------------------------------------------------- /sidecar/Dockerfile-variant: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/Dockerfile-variant -------------------------------------------------------------------------------- /sidecar/docker-build.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/docker-build.sh -------------------------------------------------------------------------------- /sidecar/files/_entrypoint_common.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/_entrypoint_common.sh -------------------------------------------------------------------------------- /sidecar/files/addons/messagelog-archiver-logback.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/addons/messagelog-archiver-logback.xml -------------------------------------------------------------------------------- /sidecar/files/addons/monitor-logback.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/addons/monitor-logback.xml -------------------------------------------------------------------------------- /sidecar/files/balancer-primary-entrypoint.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/balancer-primary-entrypoint.sh -------------------------------------------------------------------------------- /sidecar/files/balancer-secondary-entrypoint.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/balancer-secondary-entrypoint.sh -------------------------------------------------------------------------------- /sidecar/files/confclient-logback-service.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/confclient-logback-service.xml -------------------------------------------------------------------------------- /sidecar/files/confclient-logback.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/confclient-logback.xml -------------------------------------------------------------------------------- /sidecar/files/custom-fetch-pin.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/custom-fetch-pin.sh -------------------------------------------------------------------------------- /sidecar/files/op-monitor-logback.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/op-monitor-logback.xml -------------------------------------------------------------------------------- /sidecar/files/override-docker.ini: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/override-docker.ini -------------------------------------------------------------------------------- /sidecar/files/primary-slim-ss-xroad.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/primary-slim-ss-xroad.conf -------------------------------------------------------------------------------- /sidecar/files/primary-ss-xroad.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/primary-ss-xroad.conf -------------------------------------------------------------------------------- /sidecar/files/proxy-logback.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/proxy-logback.xml -------------------------------------------------------------------------------- /sidecar/files/proxy-ui-api-logback.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/proxy-ui-api-logback.xml -------------------------------------------------------------------------------- /sidecar/files/secondary-slim-ss-xroad.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/secondary-slim-ss-xroad.conf -------------------------------------------------------------------------------- /sidecar/files/secondary-ss-xroad.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/secondary-ss-xroad.conf -------------------------------------------------------------------------------- /sidecar/files/signer-console-logback.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/signer-console-logback.xml -------------------------------------------------------------------------------- /sidecar/files/signer-logback.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/signer-logback.xml -------------------------------------------------------------------------------- /sidecar/files/slim-ss-entrypoint.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/slim-ss-entrypoint.sh -------------------------------------------------------------------------------- /sidecar/files/slim-ss-xroad.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/slim-ss-xroad.conf -------------------------------------------------------------------------------- /sidecar/files/ss-entrypoint.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/ss-entrypoint.sh -------------------------------------------------------------------------------- /sidecar/files/ss-xroad.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/ss-xroad.conf -------------------------------------------------------------------------------- /sidecar/files/variables-logback.properties: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/variables-logback.properties -------------------------------------------------------------------------------- /sidecar/files/xroad-slave-sync.logrotate: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/files/xroad-slave-sync.logrotate -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/aws-eks-add-authorize-keys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/aws-eks-add-authorize-keys -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/aws-eks-create-sidecar-cluster: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/aws-eks-create-sidecar-cluster -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/aws-eks-delete-sidecar-cluster: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/aws-eks-delete-sidecar-cluster -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/aws-eks-grant-iam-access-to-cluster: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/aws-eks-grant-iam-access-to-cluster -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/docker-build-all-security-server-sidecar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/docker-build-all-security-server-sidecar -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/docker-build-security-server-sidecar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/docker-build-security-server-sidecar -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/docker-publish-all-security-server-sidecar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/docker-publish-all-security-server-sidecar -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/docker-publish-security-server-sidecar-image: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/docker-publish-security-server-sidecar-image -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/kubernetes-delete-security-server-sidecar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/kubernetes-delete-security-server-sidecar -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/kubernetes-delete-security-server-sidecar-slim: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/kubernetes-delete-security-server-sidecar-slim -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/kubernetes-deploy-security-server-sidecar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/kubernetes-deploy-security-server-sidecar -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/kubernetes-deploy-security-server-sidecar-fi: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/kubernetes-deploy-security-server-sidecar-fi -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/kubernetes-test-deploy-consumer-provider: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/kubernetes-test-deploy-consumer-provider -------------------------------------------------------------------------------- /sidecar/jenkins/pipelines/kubernetes-update-nodes-security-server-sidecar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/jenkins/pipelines/kubernetes-update-nodes-security-server-sidecar -------------------------------------------------------------------------------- /sidecar/kubernetes/grant-user-access-to-cluster.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetes/grant-user-access-to-cluster.sh -------------------------------------------------------------------------------- /sidecar/kubernetes/security-server-sidecar-local.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetes/security-server-sidecar-local.yaml -------------------------------------------------------------------------------- /sidecar/kubernetes/security-server-sidecar-restrictive-psp.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetes/security-server-sidecar-restrictive-psp.yaml -------------------------------------------------------------------------------- /sidecar/kubernetes/security-server-sidecar-slim.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetes/security-server-sidecar-slim.yaml -------------------------------------------------------------------------------- /sidecar/kubernetes/security-server-sidecar-slim.yaml.template: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetes/security-server-sidecar-slim.yaml.template -------------------------------------------------------------------------------- /sidecar/kubernetes/security-server-sidecar.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetes/security-server-sidecar.yaml -------------------------------------------------------------------------------- /sidecar/kubernetes/security-server-sidecar.yaml.template: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetes/security-server-sidecar.yaml.template -------------------------------------------------------------------------------- /sidecar/kubernetes/testRequest.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetes/testRequest.xml -------------------------------------------------------------------------------- /sidecar/kubernetesBalancer/primary/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetesBalancer/primary/Dockerfile -------------------------------------------------------------------------------- /sidecar/kubernetesBalancer/secondary/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetesBalancer/secondary/Dockerfile -------------------------------------------------------------------------------- /sidecar/kubernetesBalancer/slim/primary/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetesBalancer/slim/primary/Dockerfile -------------------------------------------------------------------------------- /sidecar/kubernetesBalancer/slim/secondary/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/kubernetesBalancer/slim/secondary/Dockerfile -------------------------------------------------------------------------------- /sidecar/slim/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nordic-institute/X-Road-Security-Server-sidecar/HEAD/sidecar/slim/Dockerfile --------------------------------------------------------------------------------