technical-assets.json

{"api-server":{"Id":"api-server","Title":"API Server","Description":"Argo CD API server. Accepts requests from the UI and CLI.","Usage":1,"Type":1,"Size":3,"Technology":8,"Machine":2,"Internet":false,"MultiTenant":true,"Redundant":true,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Argo CD Operator","Confidentiality":3,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["argo-cd-rbac-config","rendered-manifests","application-name","live-manifests","oidc-tokens","oidc-public-keys","cluster-access-credentials","cluster-access-configuration","api-server-secret","argo-tokens","repo-access-credentials","appproject-manifest","applicationset-manifest","application-manifest","argo-cd-container-image-tag","argo-cd-container-image","argocd-db-export","manifest-sources","oidc-configuration","oidc-client-secret"],"DataAssetsStored":["oidc-public-keys","argo-cd-rbac-config","oidc-configuration","bundled-ui-code"],"DataFormatsAccepted":[0,4,3],"CommunicationLinks":[{"Id":"api-server\u003efetching-rendered-manifests-from-cache","SourceId":"api-server","TargetId":"repo-server","Title":"Fetching Rendered Manifests from Cache","Description":"Fetch manifests from the repo server to display via UI or CLI.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":true,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":["application-name"],"DataAssetsReceived":["rendered-manifests"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"api-server\u003eupdate-repo-access-credentials","SourceId":"api-server","TargetId":"host-cluster-kubernetes-api","Title":"Update Repo Access Credentials","Description":"Write changes from the UI/CLI/API to repo secrets.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["repo-access-credentials"],"DataAssetsReceived":["repo-access-credentials"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"api-server\u003eupdate-rbac-config","SourceId":"api-server","TargetId":"host-cluster-kubernetes-api","Title":"Update RBAC Config","Description":"Write changes from the UI/CLI/API to RBAC config.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["argo-cd-rbac-config"],"DataAssetsReceived":["argo-cd-rbac-config"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"api-server\u003evalidate-external-oidc-token","SourceId":"api-server","TargetId":"oidc-provider","Title":"Validate External OIDC Token","Description":"Get public keys from OIDC provider to validate tokens.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":0,"DataAssetsSent":null,"DataAssetsReceived":["oidc-public-keys"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"api-server\u003eexport-database","SourceId":"api-server","TargetId":"user-cli","Title":"Export Database","Description":"Send database export to Admin Argo CD User","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":2,"Usage":1,"DataAssetsSent":["argocd-db-export"],"DataAssetsReceived":["oidc-tokens"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"api-server\u003epull-argo-cd-image","SourceId":"api-server","TargetId":"quay","Title":"Pull Argo CD Image","Description":"Pull the Argo CD container image from Quay.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":["argo-cd-container-image-tag"],"DataAssetsReceived":["argo-cd-container-image"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"api-server\u003eget-update-delete-live-resource-state-from-kubernetes-host","SourceId":"api-server","TargetId":"host-cluster-kubernetes-api","Title":"Get/Update/Delete Live Resource State from Kubernetes (Host)","Description":"Get the live state of an Argo CD-managed resource, or potentially update or delete a resource.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["application-name","rendered-manifests","cluster-access-credentials","cluster-access-configuration","argo-cd-rbac-config","repo-access-credentials","oidc-configuration","oidc-client-secret"],"DataAssetsReceived":["live-manifests","api-server-secret","cluster-access-credentials","cluster-access-configuration","repo-access-credentials","argo-cd-rbac-config","oidc-configuration","oidc-client-secret"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"api-server\u003eget-update-delete-live-resource-state-from-kubernetes-external","SourceId":"api-server","TargetId":"external-cluster-kubernetes-api","Title":"Get/Update/Delete Live Resource State from Kubernetes (External)","Description":"Get the live state of an Argo CD-managed resource, or potentially update or delete a resource on an external cluster.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["application-name","rendered-manifests","cluster-access-credentials"],"DataAssetsReceived":["live-manifests"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"api-server\u003eupdate-cluster-access-config","SourceId":"api-server","TargetId":"host-cluster-kubernetes-api","Title":"Update Cluster Access Config","Description":"Write changes from the UI/CLI/API to cluster secrets.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["cluster-access-credentials","cluster-access-configuration"],"DataAssetsReceived":["cluster-access-credentials","cluster-access-configuration"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"api-server\u003evalidate-dex-oidc-token","SourceId":"api-server","TargetId":"dex-server","Title":"Validate Dex OIDC Token","Description":"Get public keys from Dex server to validate tokens.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":true,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":null,"DataAssetsReceived":["oidc-public-keys"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":100},"application-controller":{"Id":"application-controller","Title":"Application Controller","Description":"Some Description","Usage":1,"Type":1,"Size":3,"Technology":14,"Machine":2,"Internet":false,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":true,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Argo CD Operator","Confidentiality":3,"Integrity":4,"Availability":3,"JustificationCiaRating":"The application controller is responsible for deploying applications. It contains sensitive information, i.e. deployment manifests. Changes to these manifests can change what's deployed. If the application controller is down, no other services will be disrupted, but no deployments will be made.\n","Tags":[],"DataAssetsProcessed":["rendered-manifests","cluster-access-credentials","cluster-access-configuration","live-manifests","argo-cd-container-image-tag","argo-cd-container-image"],"DataAssetsStored":[],"DataFormatsAccepted":[0],"CommunicationLinks":[{"Id":"application-controller\u003erendered-manifest-requests","SourceId":"application-controller","TargetId":"repo-server","Title":"Rendered Manifest Requests","Description":"Fetch manifests from the repo server to be applied to the cluster.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":true,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":["application-name"],"DataAssetsReceived":["rendered-manifests"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"application-controller\u003ereconcile-resource-state-host-cluster","SourceId":"application-controller","TargetId":"host-cluster-kubernetes-api","Title":"Reconcile Resource State (Host Cluster)","Description":"Reconcile the current desired manifests with the live state.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["rendered-manifests","application-name"],"DataAssetsReceived":["live-manifests"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"application-controller\u003ereconcile-resource-state-external-cluster","SourceId":"application-controller","TargetId":"external-cluster-kubernetes-api","Title":"Reconcile Resource State (External Cluster)","Description":"Reconcile the current desired manifests with the live state in an external cluster.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["rendered-manifests","application-name","cluster-access-credentials"],"DataAssetsReceived":["live-manifests"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"application-controller\u003epull-argo-cd-image","SourceId":"application-controller","TargetId":"quay","Title":"Pull Argo CD Image","Description":"Pull the Argo CD container image from Quay.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":["argo-cd-container-image-tag"],"DataAssetsReceived":["argo-cd-container-image"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":38.7911942038199},"applicationset-controller":{"Id":"applicationset-controller","Title":"ApplicationSet Controller","Description":"Some Description","Usage":1,"Type":1,"Size":3,"Technology":14,"Machine":2,"Internet":false,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":true,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Argo CD Operator","Confidentiality":3,"Integrity":4,"Availability":3,"JustificationCiaRating":"The ApplicationSet controller is responsible for deploying ApplicationSets. It contains sensitive information, i.e. deployment manifests. Changes to these manifests can change what's deployed.\n","Tags":[],"DataAssetsProcessed":["cluster-access-credentials","cluster-access-configuration","argo-cd-container-image-tag","argo-cd-container-image","applicationset-manifest","live-manifests","applicationset-name","git-branch-name","git-org-name","git-repo-url","repo-access-credentials"],"DataAssetsStored":[],"DataFormatsAccepted":[0],"CommunicationLinks":[{"Id":"applicationset-controller\u003epull-argo-cd-image","SourceId":"applicationset-controller","TargetId":"quay","Title":"Pull Argo CD Image","Description":"Pull the Argo CD container image from Quay.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":["argo-cd-container-image-tag"],"DataAssetsReceived":["argo-cd-container-image"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"applicationset-controller\u003egit-generator-pull","SourceId":"applicationset-controller","TargetId":"internal-source-control-management-api","Title":"Git Generator Pull","Description":"Get information about organizations, branches, and pull requests from the SCM.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["git-repo-url","repo-access-credentials"],"DataAssetsReceived":["git-branch-name","git-repo-name","git-org-name"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"applicationset-controller\u003ereconcile-resource-state-host-cluster","SourceId":"applicationset-controller","TargetId":"host-cluster-kubernetes-api","Title":"Reconcile Resource State (Host Cluster)","Description":"Reconcile the current desired manifests with the live state.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["applicationset-name","applicationset-manifest"],"DataAssetsReceived":["live-manifests"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":48.01954193952243},"argo-cd-build-pipeline":{"Id":"argo-cd-build-pipeline","Title":"Argo CD Build Pipeline (GitHub Actions)","Description":"Argo CD build pipeline, hosted on GitHub Actions.","Usage":1,"Type":1,"Size":2,"Technology":22,"Machine":1,"Internet":true,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"GitHub","Confidentiality":4,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["argo-cd-container-image","argo-cd-source","argo-cd-base-image","quay-push-token"],"DataAssetsStored":["quay-push-token","argo-cd-github-push-token"],"DataFormatsAccepted":[],"CommunicationLinks":[{"Id":"argo-cd-build-pipeline\u003epush-image-to-quay","SourceId":"argo-cd-build-pipeline","TargetId":"quay","Title":"Push Image to Quay","Description":"Quay image repository.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":["quay-push-token","argo-cd-container-image"],"DataAssetsReceived":null,"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"argo-cd-build-pipeline\u003epull-source","SourceId":"argo-cd-build-pipeline","TargetId":"argo-cd-source-repo","Title":"Pull Source","Description":"Pull the Argo CD source from the GitHub repo.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":null,"DataAssetsReceived":["argo-cd-source"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"argo-cd-build-pipeline\u003epull-base-image-from-docker-hub","SourceId":"argo-cd-build-pipeline","TargetId":"docker-hub","Title":"Pull Base Image from Docker Hub","Description":"Pull the Ubuntu base image from Docker Hub.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":null,"DataAssetsReceived":["argo-cd-base-image"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":28.42602499501804},"argo-cd-maintainer-git-client":{"Id":"argo-cd-maintainer-git-client","Title":"Argo CD Maintainer Git Client","Description":"Git client (and configuration) used by an Argo CD maintainer.","Usage":1,"Type":1,"Size":2,"Technology":35,"Machine":0,"Internet":false,"MultiTenant":false,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":true,"Encryption":2,"JustificationOutOfScope":"","Owner":"Argo CD Maintainer","Confidentiality":4,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["argo-cd-source","argo-cd-container-image-tag"],"DataAssetsStored":["argo-cd-source","argo-cd-container-image-tag","argo-cd-github-push-token"],"DataFormatsAccepted":[3],"CommunicationLinks":[{"Id":"argo-cd-maintainer-git-client\u003epush-code-tags-to-github","SourceId":"argo-cd-maintainer-git-client","TargetId":"argo-cd-source-repo","Title":"Push Code/Tags to GitHub","Description":"Push code to the Argo CD repo (as when cherry-picking changes) and/or push tags (as when cutting a release).","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":5,"Authorization":2,"Usage":1,"DataAssetsSent":["argo-cd-github-push-token","argo-cd-source","argo-cd-container-image-tag"],"DataAssetsReceived":["argo-cd-source","argo-cd-container-image-tag"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":8.129338950195459},"argo-cd-source-repo":{"Id":"argo-cd-source-repo","Title":"Argo CD Source Repo (GitHub)","Description":"GitHub repo holding the Argo CD source code.","Usage":1,"Type":2,"Size":2,"Technology":23,"Machine":1,"Internet":true,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"GitHub","Confidentiality":0,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["argo-cd-source","argo-cd-container-image-tag","argo-cd-github-push-token"],"DataAssetsStored":["argo-cd-source","argo-cd-container-image-tag"],"DataFormatsAccepted":[],"CommunicationLinks":[],"DiagramTweakOrder":0,"RAA":29.971480425200937},"dex-server":{"Id":"dex-server","Title":"OIDC Proxy (Dex)","Description":"OIDC Proxy (Dex)","Usage":0,"Type":1,"Size":3,"Technology":31,"Machine":2,"Internet":false,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Argo CD Operator","Confidentiality":4,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["oidc-public-keys","oidc-tokens"],"DataAssetsStored":["oidc-public-keys"],"DataFormatsAccepted":[],"CommunicationLinks":[{"Id":"dex-server\u003eproxying-to-an-external-oidc-provider","SourceId":"dex-server","TargetId":"oidc-provider","Title":"Proxying to an External OIDC Provider","Description":"Proxy requests to an external OIDC provider.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":1,"Authorization":1,"Usage":1,"DataAssetsSent":null,"DataAssetsReceived":["oidc-tokens"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":32.01970443349754},"docker-hub":{"Id":"docker-hub","Title":"Docker Hub","Description":"Docker Hub image repository.","Usage":1,"Type":2,"Size":0,"Technology":24,"Machine":1,"Internet":true,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Ubuntu","Confidentiality":0,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["argo-cd-base-image"],"DataAssetsStored":["argo-cd-base-image"],"DataFormatsAccepted":[],"CommunicationLinks":[],"DiagramTweakOrder":0,"RAA":11.61524500907441},"external-cluster-kubernetes-api":{"Id":"external-cluster-kubernetes-api","Title":"External Cluster Kubernetes API","Description":"Kubernetes API Server for a cluster Argo CD is managing","Usage":1,"Type":0,"Size":0,"Technology":14,"Machine":2,"Internet":false,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"External Cluster Operator","Confidentiality":4,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["cluster-access-credentials","rendered-manifests","live-manifests"],"DataAssetsStored":["live-manifests"],"DataFormatsAccepted":[],"CommunicationLinks":[],"DiagramTweakOrder":0,"RAA":23.671247083225307},"host-cluster-kubernetes-api":{"Id":"host-cluster-kubernetes-api","Title":"Host Cluster Kubernetes API","Description":"Kubernetes API Server for the cluster Argo CD is deployed to","Usage":1,"Type":0,"Size":0,"Technology":14,"Machine":2,"Internet":false,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Cluster Operator","Confidentiality":4,"Integrity":4,"Availability":1,"JustificationCiaRating":"The Kubernetes API Server is how Argo CD interacts with the cluster. Argo CD's configuration is stored in the cluster, and Argo CD uses the Kubernetes API Server to apply changes to the cluster. If the Kubernetes API Server is down, Argo CD will be down.\n","Tags":[],"DataAssetsProcessed":["rendered-manifests","cluster-access-credentials","cluster-access-configuration","live-manifests","applicationset-manifest","applicationset-name","application-manifest","application-name","appproject-manifest","user-provided-secret","argo-cd-rbac-config"],"DataAssetsStored":["live-manifests","cluster-access-credentials","cluster-access-configuration","repo-access-credentials","api-server-secret","applicationset-manifest","application-manifest","appproject-manifest","argo-cd-rbac-config","oidc-client-secret","oidc-configuration"],"DataFormatsAccepted":[0],"CommunicationLinks":[],"DiagramTweakOrder":0,"RAA":66.42468239564428},"internal-source-control-management-api":{"Id":"internal-source-control-management-api","Title":"Internal Source Control Management API","Description":"Source control manager (GitHub, GitLab, Helm repo, etc.) accessible only from the organization's network.","Usage":1,"Type":2,"Size":0,"Technology":14,"Machine":1,"Internet":false,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":true,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Source Control Management Operator","Confidentiality":3,"Integrity":4,"Availability":4,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["repo-access-credentials","git-repo-url","git-org-name","git-branch-name","git-repo-name"],"DataAssetsStored":["manifest-sources"],"DataFormatsAccepted":[],"CommunicationLinks":[],"DiagramTweakOrder":0,"RAA":1},"internal-source-control-management-ui":{"Id":"internal-source-control-management-ui","Title":"Internal Source Control Management UI","Description":"Internal Source Control Management UI","Usage":1,"Type":2,"Size":0,"Technology":7,"Machine":1,"Internet":false,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":true,"UsedAsClientByHuman":true,"Encryption":2,"JustificationOutOfScope":"","Owner":"Source Control Management Operator","Confidentiality":3,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["manifest-sources"],"DataAssetsStored":[],"DataFormatsAccepted":[],"CommunicationLinks":[{"Id":"internal-source-control-management-ui\u003epush-manifest-sources","SourceId":"internal-source-control-management-ui","TargetId":"internal-source-control-management-api","Title":"Push Manifest Sources","Description":"Pushes manifests to source control.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":1,"Authorization":2,"Usage":1,"DataAssetsSent":["manifest-sources"],"DataAssetsReceived":["manifest-sources"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":1},"oidc-provider":{"Id":"oidc-provider","Title":"OIDC Provider (External)","Description":"OIDC Provider (External)","Usage":0,"Type":1,"Size":1,"Technology":31,"Machine":1,"Internet":true,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":true,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Organization","Confidentiality":4,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["oidc-public-keys","oidc-tokens"],"DataAssetsStored":["oidc-public-keys"],"DataFormatsAccepted":[],"CommunicationLinks":[],"DiagramTweakOrder":0,"RAA":1},"quay":{"Id":"quay","Title":"Quay","Description":"Quay image repository.","Usage":1,"Type":2,"Size":0,"Technology":24,"Machine":1,"Internet":true,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Red Hat","Confidentiality":0,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["argo-cd-container-image","argo-cd-container-image-tag","quay-push-token"],"DataAssetsStored":["argo-cd-container-image"],"DataFormatsAccepted":[],"CommunicationLinks":[],"DiagramTweakOrder":0,"RAA":30.17889551464869},"rendered-manifests-cache":{"Id":"rendered-manifests-cache","Title":"Rendered Manifests Cache (Redis)","Description":"Rendered Manifests Cache (Redis)","Usage":1,"Type":2,"Size":3,"Technology":14,"Machine":2,"Internet":false,"MultiTenant":true,"Redundant":true,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Argo CD Operator","Confidentiality":3,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":[],"DataAssetsStored":["rendered-manifests","application-manifest","appproject-manifest","application-name"],"DataFormatsAccepted":[0],"CommunicationLinks":[],"DiagramTweakOrder":0,"RAA":23.3341975628727},"repo-server":{"Id":"repo-server","Title":"Repo Server","Description":"Pulls from manifests sources, builds manifests, caches manifests","Usage":1,"Type":1,"Size":3,"Technology":14,"Machine":2,"Internet":false,"MultiTenant":true,"Redundant":true,"CustomDevelopedParts":true,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":2,"JustificationOutOfScope":"","Owner":"Argo CD Repo-Server","Confidentiality":3,"Integrity":4,"Availability":3,"JustificationCiaRating":"The repo-server is responsible for fetching manifests and performing transformations on them (\"building\"). It contains sensitive information, i.e. deployment manifests. Changes to these manifests can change what's deployed. If the application controller is down, no other services will be disrupted, but no deployments will be made.\n","Tags":[],"DataAssetsProcessed":["rendered-manifests","manifest-sources","repo-access-credentials","argo-cd-container-image-tag","argo-cd-container-image","user-provided-secret"],"DataAssetsStored":["manifest-sources"],"DataFormatsAccepted":[0,3],"CommunicationLinks":[{"Id":"repo-server\u003estore-cached-manifest-sources","SourceId":"repo-server","TargetId":"repo-server-storage","Title":"Store Cached Manifest Sources","Description":"Cache manifest sources (from git, helm repo, OCI, etc.) to local ephemeral storage.","Protocol":38,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":["manifest-sources"],"DataAssetsReceived":["manifest-sources"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"repo-server\u003epull-argo-cd-image","SourceId":"repo-server","TargetId":"quay","Title":"Pull Argo CD Image","Description":"Pull the Argo CD container image from Quay.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":["argo-cd-container-image-tag"],"DataAssetsReceived":["argo-cd-container-image"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"repo-server\u003efetch-manifest-sources","SourceId":"repo-server","TargetId":"internal-source-control-management-api","Title":"Fetch Manifest Sources","Description":"Pulls manifest sources from source control.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":1,"Authorization":1,"Usage":1,"DataAssetsSent":["application-name"],"DataAssetsReceived":["manifest-sources"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"repo-server\u003esend-receive-cached-rendered-manifests","SourceId":"repo-server","TargetId":"rendered-manifests-cache","Title":"Send/Receive Cached Rendered Manifests","Description":"Sends and receives rendered manifests to and from the cache.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":true,"Readonly":false,"Authentication":0,"Authorization":0,"Usage":1,"DataAssetsSent":["rendered-manifests","application-name"],"DataAssetsReceived":["rendered-manifests","application-name"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"repo-server\u003eget-repo-access-credentials","SourceId":"repo-server","TargetId":"host-cluster-kubernetes-api","Title":"Get Repo Access Credentials","Description":"Get repo access credentials from Kubernetes to pull manifest sources from source control.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":3,"Authorization":1,"Usage":1,"DataAssetsSent":null,"DataAssetsReceived":["repo-access-credentials"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":38.92008174202803},"repo-server-storage":{"Id":"repo-server-storage","Title":"Repo Server Storage","Description":"Local (by default, ephemeral) storage for the repo-server.","Usage":1,"Type":2,"Size":3,"Technology":11,"Machine":2,"Internet":false,"MultiTenant":true,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":false,"Encryption":0,"JustificationOutOfScope":"","Owner":"Cluster Operator","Confidentiality":3,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["manifest-sources"],"DataAssetsStored":["manifest-sources"],"DataFormatsAccepted":[],"CommunicationLinks":[],"DiagramTweakOrder":0,"RAA":17.526575058335496},"user-cli":{"Id":"user-cli","Title":"User CLI","Description":"User CLI","Usage":1,"Type":1,"Size":2,"Technology":35,"Machine":0,"Internet":false,"MultiTenant":false,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":true,"Encryption":2,"JustificationOutOfScope":"","Owner":"Argo CD User","Confidentiality":4,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["rendered-manifests","live-manifests","oidc-tokens","argo-tokens","application-manifest","applicationset-manifest","appproject-manifest","application-name","cluster-access-credentials","cluster-access-configuration","manifest-sources","repo-access-credentials","user-provided-secret","oidc-configuration","argocd-db-export"],"DataAssetsStored":["oidc-tokens"],"DataFormatsAccepted":[],"CommunicationLinks":[{"Id":"user-cli\u003emake-requests-to-api-server","SourceId":"user-cli","TargetId":"api-server","Title":"Make Requests to API Server","Description":"Make requests to the API server.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":2,"Usage":1,"DataAssetsSent":["oidc-tokens","rendered-manifests","manifest-sources","application-name","application-manifest","applicationset-manifest","appproject-manifest","cluster-access-credentials","cluster-access-configuration","repo-access-credentials","user-provided-secret"],"DataAssetsReceived":["argo-tokens","rendered-manifests","oidc-configuration","application-name","application-manifest","applicationset-manifest","appproject-manifest"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":56.82267470027439},"web-ui":{"Id":"web-ui","Title":"Web UI","Description":"Argo CD web UI - single-page JavaScript app.","Usage":1,"Type":1,"Size":2,"Technology":7,"Machine":0,"Internet":false,"MultiTenant":false,"Redundant":false,"CustomDevelopedParts":false,"OutOfScope":false,"UsedAsClientByHuman":true,"Encryption":2,"JustificationOutOfScope":"","Owner":"Argo CD User","Confidentiality":0,"Integrity":4,"Availability":1,"JustificationCiaRating":"","Tags":[],"DataAssetsProcessed":["rendered-manifests","live-manifests","oidc-tokens","argo-tokens","application-manifest","applicationset-manifest","appproject-manifest","application-name","cluster-access-credentials","cluster-access-configuration","repo-access-credentials","user-provided-secret","oidc-configuration","bundled-ui-code","manifest-sources"],"DataAssetsStored":["oidc-tokens","bundled-ui-code"],"DataFormatsAccepted":[],"CommunicationLinks":[{"Id":"web-ui\u003eget-app-code","SourceId":"web-ui","TargetId":"api-server","Title":"Get App Code","Description":"Get the web app code from the API server.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":true,"Authentication":0,"Authorization":0,"Usage":0,"DataAssetsSent":null,"DataAssetsReceived":["bundled-ui-code"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true},{"Id":"web-ui\u003emake-requests-to-api-server","SourceId":"web-ui","TargetId":"api-server","Title":"Make Requests to API Server","Description":"Make requests to the API server.","Protocol":2,"Tags":[],"VPN":false,"IpFiltered":false,"Readonly":false,"Authentication":3,"Authorization":2,"Usage":1,"DataAssetsSent":["oidc-tokens","rendered-manifests","manifest-sources","application-name","application-manifest","applicationset-manifest","appproject-manifest","cluster-access-credentials","cluster-access-configuration","repo-access-credentials","user-provided-secret"],"DataAssetsReceived":["argo-tokens","rendered-manifests","oidc-configuration","application-name","application-manifest","applicationset-manifest","appproject-manifest"],"DiagramTweakWeight":1,"DiagramTweakConstraint":true}],"DiagramTweakOrder":0,"RAA":56.3586795627251}}