diff --git a/.markdownlint.yaml b/.markdownlint.yaml
index 07b5ea0a..bb7f6381 100644
--- a/.markdownlint.yaml
+++ b/.markdownlint.yaml
@@ -2,5 +2,6 @@
"MD007": { "indent": 4 },
"MD013": false,
"MD024": false,
+ "MD033": false,
"MD046": false,
}
diff --git a/content/about/responsibilities.md b/content/about/responsibilities.md
new file mode 100644
index 00000000..3a484622
--- /dev/null
+++ b/content/about/responsibilities.md
@@ -0,0 +1,121 @@
+# Responsibilities
+
+This page describes the responsibilities of Stakater and customers with respect to the various parts of SAAP. In essence, Stakater takes responsibility for the platform and platform data, while customer takes responsibility for their own applications and application data.
+
+## Data and Applications
+
+Customers are completely responsible for their own applications, workloads, and data that they deploy to SAAP. SAAP provides tools to help customers setup, manage, secure, integrate and optimize their apps.
+
+=== "Customer Data"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ |
- Maintain platform-level standards for data encryption
- Provide components to help manage application data such as secrets
- Enable integration with third-party data services to store and manage data outside the cluster or cloud provider
| - All customer data stored on the platform and how customer applications consume and expose this data
- Backup and restore
|
+
+=== "Customer Applications"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Create clusters with SAAP components installed, so that you can access SAAP to deploy and manage your containerized apps
- Install and provide fully managed SAAP add-ons to extend your app's capabilities
- Provide storage classes and plug-ins to support persistent volumes for use with your apps
- Provide a container image registry, so customers can securely store application container images on the cluster to deploy and manage applications
| - Complete lifecycle of customer applications and customer chosen third-party applications:
- Monitoring
- Configuration
- Deployment
- Version management
- Resource limits
- Cluster sizing
- Permissions
- Integrations
- Backup and restore
|
+
+## Change Management
+
+Stakater is responsible for change management of the control plane nodes, infrastructure nodes and services, and worker nodes. The customer is responsible for initiating infrastructure change requests needed for customer applications, and installing and maintaining optional services and networking configurations on the cluster, as well as all changes to customer data and customer applications.
+
+=== "Logging"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Aggregate and monitor platform logs
- Provide and maintain a logging operator to enable the customer to deploy a logging stack for default application logging
| - Install, configure, and maintain any optional app logging solutions in addition to the provided ones
- Modify size and frequency of application logs being produced by customer applications if they are affecting the stability of the cluster
|
+
+=== "Application Networking"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Provide the ability to set up private load balancers when required
- Provide the ability to set the OpenShift router as private
- Install, configure, and maintain OpenShift SDN components for default internal pod traffic
- Assist the customer with `NetworkPolicy` and `EgressNetworkPolicy` objects
| - Configure non-default pod network permissions for project and pod networks, pod ingress, and pod egress using `NetworkPolicy` objects
- Request and configure any additional service load balancers for specific services
- Configure any necessary DNS forwarding rules
|
+
+=== "Cluster Networking"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Set up cluster management components, such as public or private service endpoints and necessary integration with virtual networking components
- Set up internal networking components required for internal cluster communication between worker, infrastructure, and control plane nodes
| - Provide optional non-default IP address ranges for machine CIDR, service CIDR, and pod CIDR if needed through the SAAP console when the cluster is created
|
+
+=== "Virtual Networking"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Set up and configure virtual networking components required to provision the cluster, including virtual private cloud, subnets, load balancers, internet gateways, NAT gateways
- Provide the ability for the customer to manage VPN connectivity with on-premises resources, VPC to VPC connectivity, and direct connectivity as required
| - Set up and maintain optional public cloud networking components
|
+
+=== "Cluster Version"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Own the cluster upgrade scheduling process
- Publish changelogs and release notes for upgrades
| - Schedule patch version upgrades either immediately or at a specific date
- Acknowledge and schedule minor and major version upgrades
- Test customer applications on all versions to ensure compatibility
|
+
+=== "Capacity Management"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Monitor use of control plane nodes and infrastructure nodes
- Scale or resize control plane nodes to maintain quality of service
- Monitor use of customer resources including network, storage and compute capacity. Where autoscaling features are not enabled, alert customer for any changes required to cluster resources.
| - Respond to Stakater notifications regarding cluster resource requirements
|
+
+## Disaster Recovery
+
+| Stakater Responsibilities | Customer Responsibilities |
+| --- | --- |
+| - Recovery of SAAP in case of disaster
| - Recovery of the workloads that run the cluster and your applications' data
- Disaster recovery for any third-party integrations with other cloud services such as file, block, object, cloud database, logging, or audit event services
|
+
+## Incident Operations Management
+
+The customer is responsible for incident and operations management of customer application data and any custom networking the customer might have configured for the cluster network or virtual network.
+
+=== "Application Networking"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Respond to platform-component related alerts
- Monitor cloud load balancers and native OpenShift router services
| - Monitor health of customer service load balancer endpoints
- Monitor health of customer application routes, and the endpoints behind them
|
+
+=== "Virtual Networking"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Monitor cloud load balancers, subnets, and public cloud components necessary for default platform networking
| - Monitor network traffic that is optionally configured through VPC to VPC connection, VPN connection, or direct connection
|
+
+## Identity Access Management
+
+=== "Logging"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Just-in-time access to relevant logs via Privileged Access Management (PAM)
| - Configure OpenShift RBAC to control access to projects and by extension a project's application logs
- For third-party or custom application logging solutions, the customer is responsible for access management
|
+
+=== "Application Networking"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Just-in-time access to relevant logs via Privileged Access Management (PAM)
| - Manage organization administrators for Stakater to grant access to SAAP console
|
+
+=== "Cluster Networking"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Just-in-time access to relevant logs via Privileged Access Management (PAM)
| - Manage organization administrators for Stakater to grant access to SAAP console
|
+
+=== "Virtual Networking"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Just-in-time access to relevant logs via Privileged Access Management (PAM)
| - Manage optional user access to public cloud components
|
+
+## Security Regulation Compliance
+
+=== "Logging"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Retain audit logs for security incidents for a defined period of time to support forensic analysis
| - Analyze application logs for security events
|
+
+=== "Virtual Networking"
+
+ | Stakater Responsibilities | Customer Responsibilities |
+ | --- | --- |
+ | - Monitor virtual networking components for potential issues and security threats
| - Monitor optionally-configured virtual networking components for potential issues and security threats
|
diff --git a/content/about/responsibility-matrix/.gitkeep b/content/about/responsibility-matrix/.gitkeep
deleted file mode 100644
index e69de29b..00000000
diff --git a/content/about/responsibility-matrix/applications-data.csv b/content/about/responsibility-matrix/applications-data.csv
deleted file mode 100644
index 90e818f2..00000000
--- a/content/about/responsibility-matrix/applications-data.csv
+++ /dev/null
@@ -1,3 +0,0 @@
-Resource,Stakater responsibilities,Your responsibilities
-Customer data,- Maintain platform-level standards for data encryption.
- Provide OpenShift components to help manage application data such as secrets.
- Enable integration with third-party data services (such as AWS RDS or Google Cloud SQL) to store and manage data outside of the cluster and/or cloud provider.
,- Maintain responsibility for all customer data stored on the platform and how customer applications consume and expose this data.
-Customer applications,- Provision clusters with Red Hat OpenShift components installed so that you can access the Red Hat OpenShift API to deploy and manage your containerized apps.
- Provide OpenShift components to help manage application data such as secrets.
- Provide a number of managed add-ons to extend your app's capabilities. Maintenance is simplified for you because Stakater provides the installation and updates for the managed add-ons.
- Provide storage classes and plug-ins to support persistent volumes for use with your apps.
- Provide a container image registry so customers can securely store application container images on the cluster to deploy and manage applications.
,- Maintain responsibility for customer and third-party applications; data; and their complete lifecycle.
- If you add community third-party your own or other services to your cluster such as by using Operators then you are responsible for these services and for working with the appropriate provider to troubleshoot any issues.
- Use the provided tools and features to configure and deploy; keep up-to-date; set up resource requests and limits; size the cluster to have enough resources to run apps; set up permissions; integrate with other services; manage any image streams or templates that the customer deploys; externally serve; save back up and restore data; and otherwise manage their highly available and resilient workloads.
- Maintain responsibility for monitoring the applications run on SAAP.
\ No newline at end of file
diff --git a/content/about/responsibility-matrix/applications-data.md b/content/about/responsibility-matrix/applications-data.md
deleted file mode 100644
index 431d5655..00000000
--- a/content/about/responsibility-matrix/applications-data.md
+++ /dev/null
@@ -1,5 +0,0 @@
-# Applications and data
-
-You are completely responsible for the applications, workloads, and data that you deploy to SAAP. However, SAAP provides various tools to help you set up, manage, secure, integrate and optimize your apps as described in the following table.
-
-{{ read_csv('applications-data.csv') }}
diff --git a/content/about/responsibility-matrix/change-management.md b/content/about/responsibility-matrix/change-management.md
deleted file mode 100644
index e69de29b..00000000
diff --git a/content/about/responsibility-matrix/disaster-recovery.md b/content/about/responsibility-matrix/disaster-recovery.md
deleted file mode 100644
index 74260c78..00000000
--- a/content/about/responsibility-matrix/disaster-recovery.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# Disaster Recovery
-
-Stakater is responsible for the recovery of Red Hat OpenShift in case of disaster. You are responsible for the recovery of the workloads that run the cluster and your applications data. If you integrate with other cloud services such as file, block, object, cloud database, logging, or audit event services, consult those services' disaster recovery information.
diff --git a/content/about/responsibility-matrix/identity-access-management.md b/content/about/responsibility-matrix/identity-access-management.md
deleted file mode 100644
index e69de29b..00000000
diff --git a/content/about/responsibility-matrix/incident-operations-management.md b/content/about/responsibility-matrix/incident-operations-management.md
deleted file mode 100644
index e69de29b..00000000
diff --git a/content/about/responsibility-matrix/overview.md b/content/about/responsibility-matrix/overview.md
deleted file mode 100644
index e69de29b..00000000
diff --git a/content/about/responsibility-matrix/security-regulation-compliance.md b/content/about/responsibility-matrix/security-regulation-compliance.md
deleted file mode 100644
index e69de29b..00000000
diff --git a/mkdocs.yml b/mkdocs.yml
index d4108800..e6871537 100644
--- a/mkdocs.yml
+++ b/mkdocs.yml
@@ -21,6 +21,8 @@ markdown_extensions:
- name: mermaid
class: mermaid
format: !!python/name:pymdownx.superfences.fence_code_format
+ - pymdownx.tabbed:
+ alternate_style: true
- attr_list
- tables
- pymdownx.emoji:
@@ -64,14 +66,7 @@ nav:
- about/service-definition/cicd-pipelines.md
- about/service-definition/service-mesh.md
- about/service-definition/multitenancy.md
- - Responsibility Matrix:
- - about/responsibility-matrix/overview.md
- - about/responsibility-matrix/incident-operations-management.md
- - about/responsibility-matrix/change-management.md
- - about/responsibility-matrix/identity-access-management.md
- - about/responsibility-matrix/security-regulation-compliance.md
- - about/responsibility-matrix/applications-data.md
- - about/responsibility-matrix/disaster-recovery.md
+ - about/responsibilities.md
- Cloud Providers:
- about/cloud-providers/overview.md
- about/cloud-providers/aws.md
@@ -299,4 +294,3 @@ nav:
plugins:
- search
- mermaid2
- - table-reader