Tag-security: Identity, Access, Credentials, Secrets, Certificates Paper

[TheFoxAtWork]

Description: The Cloud Native Security Whitepaper did not go into detail about Identity, Access, Credentials, Secrets, Certificates and these concepts are still new and somewhat confusing to the community. There is a lack of understanding in how each of these should work, how they are used, and what tools in the ecosystem support each of these concepts and how they interrelate. It is requested that Cloud Native Security create a paper to clarify these leveraging the terms used from #564

Impact: This paper should provide the community with clarity on what an identity is, secret usage versus keys, how certificates are used and created/rotated. GitOps flow considerations, etc. Providing this level of information should reduce the confusion on implementation of these components

Scope: This is expected to be a multi-week effort with much discussion. it should follow our traditional paper process.
TO DO

• [ ] SIG Representative
• [ ] Project leader(s)
• [ ] Project members: @gadinaor-r7 , @sublimino , @bradmccoydev , @andreacavagna01

[gadinaor-r7]

@TheFoxAtWork // happy to engage on this front

[sublimino]

+1 I can contribute some content too 👍

[bradmccoydev]

I can contribute also

[andreacavagna01]

+1 to contribute with some content too

[elinesterov]

I can help with that as well if you need another +1.

[stale[bot]]

This issue has been automatically marked as inactive because it has not had recent activity.

[ragashreeshekar]

+1