CNCF FluxCD Threat Model
Published with TAG Security (Technical Advisory Group on Security, CNCF)
April 5, 2023
Threat model
ControlPlane, as core maintainers of Flux CD, collaborated with the CNCF Technical Advisory Group (TAG) Security to develop a comprehensive threat model for Flux CD as part of its graduation process. This assessment represents one of the most thorough security evaluations conducted for a CNCF project.
Flux CD’s graduation to a CNCF graduated project required a comprehensive security assessment, demonstrating the project’s maturity, security posture, and readiness for enterprise production deployments. This threat model serves as both a security evaluation and a blueprint for secure Flux CD deployments.
Access Publication
Related Publications
CNCF (Cloud Native Computing Foundation)\
CNCF ArgoCD End User Hardening Guide \
A guide to hardening ArgoCD for end users.\
WeaveWorks\
Hardening Git for GitOps \
How to secure Git workflows for GitOps.\
CNCF (Cloud Native Computing Foundation)\
CNCF Envoy Gateway Threat Model \
A comprehensive threat model for the Envoy Gateway.\