ELK security

• Portal will assist with this work - see Lorraine Welch -
  kubernetes level (rbac)
• AAF - LOG meeting sync - michaelobrien will attend with vj730c
• RBAC roles/users via aaf - specifically rbac for api calls all the way down to the es index level (need to config/wrap the OOTB elk containers
• elk nodeports - via
• static out of container access (file system - user access) - vm ssh access for example
• research with AAF on overlap of security procedures
  ry303t sseabolt
  https://wiki.onap.org/display/DW/Cloud+Native+Deployment
• work with security subcommittee
• work with JImmy of AAI on cert experience
• aaf generates certs now 20180723 - https://lists.onap.org/g/onap-discuss/topic/fw_onap_aaf_now/23778621?p=,,,20,0,0,0::recentpostdate%2Fsticky,,,20,2,0,23778621

Discussing with Alex Salvaranim

see
https://wiki.onap.org/pages/viewpage.action?pageId=3247151
Cover off ISTIO work - see OOM-1313

AWS references
https://aws.amazon.com/compliance/
https://d1.awsstatic.com/whitepapers/compliance/AWS_Logical_Separation_Handbook.pdf