Updated examples with new formatting

hyakuhei · Jul 24, 2021 · 4b54c70 · 4b54c70
1 parent 53fb3be
commit 4b54c70
Show file tree

Hide file tree

Showing 58 changed files with 232 additions and 195 deletions.
diff --git a/examples/OPA_orchestration/AggregatedDfd-dfd b/examples/OPA_orchestration/AggregatedDfd-dfd
@@ -1,41 +1,41 @@
-digraph "Aggregated DFD" {
-	edge [dir=forward]
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+digraph all {
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	Developer
 	subgraph "cluster_Control Cluster" {
-		graph [color=red fontname=Arial fontsize=12 label="Control Cluster" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Control Cluster" style=dashed]
 		"Cluster Orchestrator"
 	}
 	subgraph cluster_AWS {
-		graph [color=red fontname=Arial fontsize=12 label=AWS line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label=AWS style=dashed]
 		IAM
 		EKS
 	}
 	subgraph "cluster_New AWS Account" {
-		graph [color=red fontname=Arial fontsize=12 label="New AWS Account" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="New AWS Account" style=dashed]
 		subgraph "cluster_New Kubernetes Cluster" {
-			graph [color=red fontname=Arial fontsize=12 label="New Kubernetes Cluster" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="New Kubernetes Cluster" style=dashed]
 			"k8s API"
 		}
 	}
 	subgraph "cluster_Cluster Orchestrator" {
-		graph [color=red fontname=Arial fontsize=12 label="Cluster Orchestrator" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Cluster Orchestrator" style=dashed]
 		"Admission Controller"
 		OPA
 	}
 	subgraph "cluster_Version Control" {
-		graph [color=red fontname=Arial fontsize=12 label="Version Control" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Version Control" style=dashed]
 		"Policy Repo"
 	}
-	Developer -> "Cluster Orchestrator"
-	"Cluster Orchestrator" -> "Cluster Orchestrator"
-	"Cluster Orchestrator" -> IAM
-	"Cluster Orchestrator" -> EKS
-	"Cluster Orchestrator" -> "k8s API"
-	Developer -> "k8s API"
-	"k8s API" -> "Admission Controller"
-	"Admission Controller" -> OPA
-	OPA -> "Policy Repo"
-	OPA -> "k8s API"
+	Developer -> "Cluster Orchestrator" [dir=forward]
+	"Cluster Orchestrator" -> "Cluster Orchestrator" [dir=forward]
+	"Cluster Orchestrator" -> IAM [dir=both]
+	"Cluster Orchestrator" -> EKS [dir=both]
+	"Cluster Orchestrator" -> "k8s API" [dir=forward]
+	Developer -> "k8s API" [dir=both]
+	"k8s API" -> "Admission Controller" [dir=forward]
+	"Admission Controller" -> OPA [dir=forward]
+	OPA -> "Policy Repo" [dir=both]
+	OPA -> "k8s API" [dir=forward]
 }
diff --git a/examples/OPA_orchestration/AggregatedDfd-dfd.png b/examples/OPA_orchestration/AggregatedDfd-dfd.png
diff --git a/examples/OPA_orchestration/Developer creates a pod-dfd b/examples/OPA_orchestration/Developer creates a pod-dfd
@@ -1,21 +1,22 @@
 digraph "Developer creates a pod" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	Developer
 	subgraph "cluster_New AWS Account" {
-		graph [color=red fontname=Arial fontsize=12 label="New AWS Account" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="New AWS Account" style=dashed]
 		subgraph "cluster_New Kubernetes Cluster" {
-			graph [color=red fontname=Arial fontsize=12 label="New Kubernetes Cluster" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="New Kubernetes Cluster" style=dashed]
 			"k8s API"
 		}
 	}
 	subgraph "cluster_Cluster Orchestrator" {
-		graph [color=red fontname=Arial fontsize=12 label="Cluster Orchestrator" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Cluster Orchestrator" style=dashed]
 		"Admission Controller"
 		OPA
 	}
 	subgraph "cluster_Version Control" {
-		graph [color=red fontname=Arial fontsize=12 label="Version Control" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Version Control" style=dashed]
 		"Policy Repo"
 	}
 	Developer -> "k8s API" [label="(1) Create POD"]

diff --git a/examples/OPA_orchestration/Developer creates a pod-dfd.png b/examples/OPA_orchestration/Developer creates a pod-dfd.png
diff --git a/examples/OPA_orchestration/Developer requests a new cluster-dfd b/examples/OPA_orchestration/Developer requests a new cluster-dfd
@@ -1,20 +1,21 @@
 digraph "Developer requests a new cluster" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	Developer
 	subgraph "cluster_Control Cluster" {
-		graph [color=red fontname=Arial fontsize=12 label="Control Cluster" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Control Cluster" style=dashed]
 		"Cluster Orchestrator"
 	}
 	subgraph cluster_AWS {
-		graph [color=red fontname=Arial fontsize=12 label=AWS line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label=AWS style=dashed]
 		IAM
 		EKS
 	}
 	subgraph "cluster_New AWS Account" {
-		graph [color=red fontname=Arial fontsize=12 label="New AWS Account" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="New AWS Account" style=dashed]
 		subgraph "cluster_New Kubernetes Cluster" {
-			graph [color=red fontname=Arial fontsize=12 label="New Kubernetes Cluster" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="New Kubernetes Cluster" style=dashed]
 			"k8s API"
 		}
 	}

diff --git a/examples/OPA_orchestration/Developer requests a new cluster-dfd.png b/examples/OPA_orchestration/Developer requests a new cluster-dfd.png
diff --git a/examples/aws-eks-add-on-permissions/AggregatedDfd-dfd b/examples/aws-eks-add-on-permissions/AggregatedDfd-dfd
@@ -1,25 +1,26 @@
 digraph all {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	User
 	subgraph "cluster_AWS SVCs" {
-		graph [color=red fontname=Arial fontsize=12 label="AWS SVCs" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="AWS SVCs" style=dashed]
 		EKS
 		IAM
 		VPC
 	}
 	subgraph "cluster_Single Tenant VPC" {
-		graph [color=red fontname=Arial fontsize=12 label="Single Tenant VPC" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Single Tenant VPC" style=dashed]
 		subgraph "cluster_Kubernetes Control Plane" {
-			graph [color=red fontname=Arial fontsize=12 label="Kubernetes Control Plane" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="Kubernetes Control Plane" style=dashed]
 			"Kube API"
 			"eks-pod-identity-webhook"
 		}
 	}
 	subgraph "cluster_Customer Account" {
-		graph [color=red fontname=Arial fontsize=12 label="Customer Account" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Customer Account" style=dashed]
 		subgraph "cluster_Kubernetes Data Plane" {
-			graph [color=red fontname=Arial fontsize=12 label="Kubernetes Data Plane" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="Kubernetes Data Plane" style=dashed]
 			Kubelet
 			"CNI Pod"
 		}

diff --git a/examples/aws-eks-add-on-permissions/AggregatedDfd-dfd.png b/examples/aws-eks-add-on-permissions/AggregatedDfd-dfd.png
diff --git a/examples/aws-eks-add-on-permissions/Associate IAM role to a cluster service account-dfd b/examples/aws-eks-add-on-permissions/Associate IAM role to a cluster service account-dfd
@@ -1,11 +1,12 @@
 digraph "Associate IAM role to a cluster service account" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	User
 	subgraph "cluster_Single Tenant VPC" {
-		graph [color=red fontname=Arial fontsize=12 label="Single Tenant VPC" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Single Tenant VPC" style=dashed]
 		subgraph "cluster_Kubernetes Control Plane" {
-			graph [color=red fontname=Arial fontsize=12 label="Kubernetes Control Plane" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="Kubernetes Control Plane" style=dashed]
 			"Kube API"
 		}
 	}

diff --git a/...-eks-add-on-permissions/Associate IAM role to a cluster service account-dfd.png b/...-eks-add-on-permissions/Associate IAM role to a cluster service account-dfd.png
diff --git a/examples/aws-eks-add-on-permissions/CNI configures VPC-dfd b/examples/aws-eks-add-on-permissions/CNI configures VPC-dfd
@@ -1,15 +1,16 @@
 digraph "CNI configures VPC" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	subgraph "cluster_Customer Account" {
-		graph [color=red fontname=Arial fontsize=12 label="Customer Account" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Customer Account" style=dashed]
 		subgraph "cluster_Kubernetes Data Plane" {
-			graph [color=red fontname=Arial fontsize=12 label="Kubernetes Data Plane" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="Kubernetes Data Plane" style=dashed]
 			"CNI Pod"
 		}
 	}
 	subgraph "cluster_AWS SVCs" {
-		graph [color=red fontname=Arial fontsize=12 label="AWS SVCs" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="AWS SVCs" style=dashed]
 		VPC
 	}
 	"CNI Pod" -> VPC [label="(1) Update VPC configuration,

diff --git a/examples/aws-eks-add-on-permissions/CNI configures VPC-dfd.png b/examples/aws-eks-add-on-permissions/CNI configures VPC-dfd.png
diff --git a/examples/aws-eks-add-on-permissions/Create an IAM OIDC provider for cluster-dfd b/examples/aws-eks-add-on-permissions/Create an IAM OIDC provider for cluster-dfd
@@ -1,9 +1,10 @@
 digraph "Create an IAM OIDC provider for cluster" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	User
 	subgraph "cluster_AWS SVCs" {
-		graph [color=red fontname=Arial fontsize=12 label="AWS SVCs" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="AWS SVCs" style=dashed]
 		EKS
 		IAM
 	}

diff --git a/...ples/aws-eks-add-on-permissions/Create an IAM OIDC provider for cluster-dfd.png b/...ples/aws-eks-add-on-permissions/Create an IAM OIDC provider for cluster-dfd.png
diff --git a/...s-eks-add-on-permissions/Create an IAM policy & role to allow CPI addon to manage VPC-dfd b/...s-eks-add-on-permissions/Create an IAM policy & role to allow CPI addon to manage VPC-dfd
@@ -1,9 +1,10 @@
 digraph "Create an IAM policy & role to allow CPI addon to manage VPC" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	User
 	subgraph "cluster_AWS SVCs" {
-		graph [color=red fontname=Arial fontsize=12 label="AWS SVCs" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="AWS SVCs" style=dashed]
 		IAM
 	}
 	User -> IAM [label="(1) Create Policy"]

diff --git a/...ermissions/Create an IAM policy & role to allow CPI addon to manage VPC-dfd.png b/...ermissions/Create an IAM policy & role to allow CPI addon to manage VPC-dfd.png
diff --git a/examples/aws-eks-add-on-permissions/Deploy Addon-dfd b/examples/aws-eks-add-on-permissions/Deploy Addon-dfd
@@ -1,23 +1,24 @@
 digraph "Deploy Addon" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	User
 	subgraph "cluster_AWS SVCs" {
-		graph [color=red fontname=Arial fontsize=12 label="AWS SVCs" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="AWS SVCs" style=dashed]
 		EKS
 	}
 	subgraph "cluster_Single Tenant VPC" {
-		graph [color=red fontname=Arial fontsize=12 label="Single Tenant VPC" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Single Tenant VPC" style=dashed]
 		subgraph "cluster_Kubernetes Control Plane" {
-			graph [color=red fontname=Arial fontsize=12 label="Kubernetes Control Plane" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="Kubernetes Control Plane" style=dashed]
 			"Kube API"
 			"eks-pod-identity-webhook"
 		}
 	}
 	subgraph "cluster_Customer Account" {
-		graph [color=red fontname=Arial fontsize=12 label="Customer Account" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Customer Account" style=dashed]
 		subgraph "cluster_Kubernetes Data Plane" {
-			graph [color=red fontname=Arial fontsize=12 label="Kubernetes Data Plane" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="Kubernetes Data Plane" style=dashed]
 			Kubelet
 			"CNI Pod"
 		}

diff --git a/examples/aws-eks-add-on-permissions/Deploy Addon-dfd.png b/examples/aws-eks-add-on-permissions/Deploy Addon-dfd.png
diff --git a/examples/aws-iam-authenticator/API traffic-dfd b/examples/aws-iam-authenticator/API traffic-dfd
@@ -1,15 +1,16 @@
 digraph "API traffic" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	subgraph "cluster_User Machine" {
-		graph [color=red fontname=Arial fontsize=12 label="User Machine" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="User Machine" style=dashed]
 		kubectl
 	}
 	subgraph "cluster_AWS Cloud" {
-		graph [color=red fontname=Arial fontsize=12 label="AWS Cloud" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="AWS Cloud" style=dashed]
 		"AWS STS"
 		subgraph "cluster_EKS Cluster" {
-			graph [color=red fontname=Arial fontsize=12 label="EKS Cluster" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="EKS Cluster" style=dashed]
 			"Kubernetes API"
 			"aws-iam-authenticator"
 		}

diff --git a/examples/aws-iam-authenticator/API traffic-dfd.png b/examples/aws-iam-authenticator/API traffic-dfd.png
diff --git a/examples/aws-iam-authenticator/AggregatedDfd-dfd b/examples/aws-iam-authenticator/AggregatedDfd-dfd
@@ -1,16 +1,17 @@
 digraph all {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	subgraph "cluster_User Machine" {
-		graph [color=red fontname=Arial fontsize=12 label="User Machine" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="User Machine" style=dashed]
 		kubectl
 		"aws-cli"
 	}
 	subgraph "cluster_AWS Cloud" {
-		graph [color=red fontname=Arial fontsize=12 label="AWS Cloud" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="AWS Cloud" style=dashed]
 		"AWS STS"
 		subgraph "cluster_EKS Cluster" {
-			graph [color=red fontname=Arial fontsize=12 label="EKS Cluster" line=dotted]
+			graph [color=red fontname=Arial fontsize=11 label="EKS Cluster" style=dashed]
 			"Kubernetes API"
 			"aws-iam-authenticator"
 		}

diff --git a/examples/aws-iam-authenticator/AggregatedDfd-dfd.png b/examples/aws-iam-authenticator/AggregatedDfd-dfd.png
diff --git a/examples/aws-iam-authenticator/kubectl gets pre-signed URL-dfd b/examples/aws-iam-authenticator/kubectl gets pre-signed URL-dfd
@@ -1,8 +1,9 @@
 digraph "kubectl gets pre-signed URL" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	subgraph "cluster_User Machine" {
-		graph [color=red fontname=Arial fontsize=12 label="User Machine" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="User Machine" style=dashed]
 		kubectl
 		"aws-cli"
 	}

diff --git a/examples/aws-iam-authenticator/kubectl gets pre-signed URL-dfd.png b/examples/aws-iam-authenticator/kubectl gets pre-signed URL-dfd.png
diff --git a/examples/bookstore/AggregatedDfd-dfd b/examples/bookstore/AggregatedDfd-dfd
@@ -1,26 +1,23 @@
-digraph "Aggregated DFD" {
-	edge [dir=forward]
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+digraph all {
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	Customer
 	subgraph "cluster_Front End" {
-		graph [color=red fontname=Arial fontsize=12 label="Front End" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Front End" style=dashed]
 		Nginx
 	}
 	subgraph "cluster_Back End" {
-		graph [color=red fontname=Arial fontsize=12 label="Back End" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Back End" style=dashed]
 		"User Database"
-	}
-	subgraph "cluster_Back End" {
-		graph [color=red fontname=Arial fontsize=12 label="Back End" line=dotted]
 		"Stock Database"
 	}
 	subgraph "cluster_External CDN" {
-		graph [color=red fontname=Arial fontsize=12 label="External CDN" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="External CDN" style=dashed]
 		CDN
 	}
-	Customer -> Nginx
-	Nginx -> "User Database"
-	Nginx -> "Stock Database"
-	Customer -> CDN
+	Customer -> Nginx [dir=both]
+	Nginx -> "User Database" [dir=both]
+	Nginx -> "Stock Database" [dir=both]
+	Customer -> CDN [dir=forward]
 }
diff --git a/examples/bookstore/AggregatedDfd-dfd.png b/examples/bookstore/AggregatedDfd-dfd.png
diff --git a/examples/bookstore/Customer Lists Books-dfd b/examples/bookstore/Customer Lists Books-dfd
@@ -1,13 +1,14 @@
 digraph "Customer Lists Books" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	Customer
 	subgraph "cluster_Front End" {
-		graph [color=red fontname=Arial fontsize=12 label="Front End" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Front End" style=dashed]
 		Nginx
 	}
 	subgraph "cluster_Back End" {
-		graph [color=red fontname=Arial fontsize=12 label="Back End" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Back End" style=dashed]
 		"Stock Database"
 	}
 	Customer -> Nginx [label="(1) GET /list, Login Cookie"]

diff --git a/examples/bookstore/Customer Lists Books-dfd.png b/examples/bookstore/Customer Lists Books-dfd.png
diff --git a/examples/bookstore/Customer Login-dfd b/examples/bookstore/Customer Login-dfd
@@ -1,13 +1,14 @@
 digraph "Customer Login" {
-	color=blue rankdir=LR
-	node [fontname=Arial fontsize=14]
+	color=blue fontname=Arial rankdir=LR
+	node [fontname=Arial fontsize=11 shape=box style=rounded]
+	edge [fontname=Arial fontsize=11]
 	Customer
 	subgraph "cluster_Front End" {
-		graph [color=red fontname=Arial fontsize=12 label="Front End" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Front End" style=dashed]
 		Nginx
 	}
 	subgraph "cluster_Back End" {
-		graph [color=red fontname=Arial fontsize=12 label="Back End" line=dotted]
+		graph [color=red fontname=Arial fontsize=11 label="Back End" style=dashed]
 		"User Database"
 	}
 	Customer -> Nginx [label="(1) GET /Login credentials"]

diff --git a/examples/bookstore/Customer Login-dfd.png b/examples/bookstore/Customer Login-dfd.png