This page is mostly a wishful thinking. It does not reflect the current state of ONAP security. It's rather where we would like to be.

ONAP introduction

ONAP from the milky way point of view

...

1. If automated certificate retrieval is used on one of .... has to be supported by the CA

Requirements towards exposed interfaces

1. North and south interfaces should be separated (ie different instance of ingress controller) to allow to configure operator network policy properly
2. All Northbound interfaces has to be protected using TLS
3. All Northbound interfaces has to support SSO
4. All Northbound interfaces has to support RBAC
5. All roles used in ONAP have to be documented
6. All forms should validate and sanitize their input provided by the user
7. Southbound interfaces has to fulfill VNF security requirements
8. ...