feat(docs): Kubeflow Security Self Assessment (#871)

* feat(docs): Kubeflow Security Self-Assessment

Signed-off-by: Andrey Velichkevich <[email protected]>

* Fix text

Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/README.md

Co-authored-by: Julius von Kohout <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Julius von Kohout <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Add OpenSSF for Katib + Notebooks

Signed-off-by: Andrey Velichkevich <[email protected]>

* Add model registry pyproject

Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Matteo Mortari <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Matteo Mortari <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Matteo Mortari <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Matteo Mortari <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Matteo Mortari <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update Kubeflow Overview

Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Manabu McCloskey <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Manabu McCloskey <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Manabu McCloskey <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Manabu McCloskey <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Manabu McCloskey <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update RBAC for Spark

Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Manabu McCloskey <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update Actors for KFP

Signed-off-by: Andrey Velichkevich <[email protected]>

* Add Launcher info

Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Fix text

Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Remove non-k8s deployment

Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Update security/self-assessment.md

Co-authored-by: Alex <[email protected]>
Signed-off-by: Andrey Velichkevich <[email protected]>

* Group SBOMs by project

Signed-off-by: Andrey Velichkevich <[email protected]>

* Update SBOM for Notebooks v1

Signed-off-by: Andrey Velichkevich <[email protected]>

---------

Signed-off-by: Andrey Velichkevich <[email protected]>
Co-authored-by: Julius von Kohout <[email protected]>
Co-authored-by: Matteo Mortari <[email protected]>
Co-authored-by: Manabu McCloskey <[email protected]>
Co-authored-by: Alex <[email protected]>

Author: 5 people

security/OWNERS

@@ -1,20 +1,26 @@
-# Kubeflow Security Team
+# Kubeflow Security
 
-This folder contains information regarding the newly formed (January 2023) Kubeflow Security Team. 
+This folder contains information regarding the Kubeflow security.
 
-Since this team is just beginning, there is a lot of work to be done. 
-If you are a security professional, and you are a Kubeflow User we encourage you to get involved with the Kubeflow Security Team. 
+## Security Self-Assessment
 
-## Get Involved
+The security self-assessment document is determining gaps in Kubeflow security,
+and preparing the security documentation for Kubeflow users.
 
-- **Join** the [CNCF Slack Workspace](https://www.kubeflow.org/docs/about/community/#kubeflow-slack-channels) and the [`#kubeflow-platform`](https://app.slack.com/client/T08PSQ7BQ/C073W572LA2) channel. 
-- **Attend** the _Kubeflow Manifests WG_ meeting ([meeting notes](https://docs.google.com/document/d/1je_qzoJCAVXndxeJAgA8cdugvYZfsgrAi7HP_WDeUN0/edit), [community calendar](https://www.kubeflow.org/docs/about/community/#kubeflow-community-calendars)).
+- [Kubeflow Security Self-Assessment](self-assessment.md).
+
+## Security Audit
+
+Kubeflow participates in 3rd party security audits. You can find the audit results here:
 
-## Roadmap
+- TODO (andreyvelich): Add document once it is published.
 
-Please see the [Kubeflow Security Team Roadmap](ROADMAP.md) for more information.
+## Get Involved
+
+- **Join** the [CNCF Slack Workspace](https://www.kubeflow.org/docs/about/community/#kubeflow-slack-channels) and the [`#kubeflow-platform`](https://app.slack.com/client/T08PSQ7BQ/C073W572LA2) channel.
+- **Attend** the _Kubeflow Manifests WG_ meeting ([meeting notes](https://docs.google.com/document/d/1je_qzoJCAVXndxeJAgA8cdugvYZfsgrAi7HP_WDeUN0/edit), [community calendar](https://www.kubeflow.org/docs/about/community/#kubeflow-community-calendars)).
 
-## Policies and Procedures
+## Work in Progress Documents
 
 We are actively working to finalize the Policies and Procedures for the Kubeflow Security Team.