Appendix B: References and Version History
Appendix B: References and Version History
← Previous: Appendix A | Index | Next: —
B.1 Normative References
| Reference | Relevance |
|---|---|
| RFC-IAM-0001 v1.0.0 — Federated Identity and Access Management | Authorization ceiling; Entra as identity root |
STD-IDENT-001 v1.0.0 (ovh-infra docs/standards/STD-IDENT-001.md) — Identity & SSO standard | Group→role only; no hand-run assignments; per-layer break-glass ≤4h logged; 30-day stale review; MFA on privileged paths |
| RFC 2119 / RFC 8174 | Requirement keywords |
B.2 Informative References
| Reference | Relevance |
|---|---|
| RFC-PAM-0001 v1.0.0 — Privileged Access Management (Teleport) | Policy goals carried forward; broker choice superseded |
| RFC-WORKLOAD-IDENTITY-0001 | Non-human identity; automation credentials preserved here |
| RFC-SECOPS-0001 | Secret storage and rotation |
ovh-infra docs/ssh-access.md, docs/arc-ssh-quickstart.md | Current Arc SSH operation |
ovh-infra terraform/modules/arc-config/main.tf, terraform/environments/prod/dataservers-rbac.tf | Existing RBAC declarations extended by this RFC |
ovh-infra docs/deployment-platform-design/substrate/01-host-baseline.md | sshd hardening floor |
ovh-infra docs/deployment-platform-design/sso-and-group-rbac.md | pn-<scope>-<role> naming |
Microsoft Learn — Azure Arc SSH access; AADSSHLoginForLinux; Privileged Identity Management for Azure resources; Arc managed identity | Platform capabilities relied upon |
sudoers(5), sudoreplay(8), pam_wheel(8) | Host enforcement mechanisms |
B.3 Internal References
| Item | Location |
|---|---|
| Access-map runbook (to be created) | ovh-infra docs/runbooks/onprem-pve-access-map.md |
| Break-glass runbook (to be created) | ovh-infra docs/runbooks/onprem-pve-break-glass.md |
| Deploy quickstart (to be created) | ovh-infra docs/pn-deploy-quickstart.md |
| Ansible roles (to be created) | ovh-infra ansible/roles/{pn-access,pn-deploy,host-access-policy} |
| Terraform map (to be extended) | ovh-infra terraform/environments/prod/ |
B.4 Version History
| Version | Date | Author | Changes |
|---|---|---|---|
| 1.0.0 | 2026-09-17 | Mohammed Faizan | Initial draft for Platform Lead review |
Document Navigation
| Previous | Index | Next |
|---|---|---|
| ← Appendix A | Table of Contents | — |
End of Appendix B — End of RFC-PAM-0002