mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
57 lines
3.1 KiB
Plaintext
57 lines
3.1 KiB
Plaintext
|
|
// Module included in the following assemblies:
|
|
//
|
|
// * rosa_architecture/rosa_policy_service_definition/rosa-policy-responsibility-matrix.adoc
|
|
|
|
:_mod-docs-content-type: CONCEPT
|
|
[id="rosa-policy-customer-responsibility_{context}"]
|
|
= Additional customer responsibilities for data and applications
|
|
|
|
The customer is responsible for the applications, workloads, and data that they deploy to Red{nbsp}Hat
|
|
OpenShift Service on AWS. However, Red{nbsp}Hat and AWS provide various tools to help the customer
|
|
manage data and applications on the platform.
|
|
|
|
[cols="2a,3a,3a",options="header"]
|
|
|===
|
|
|
|
|Resource
|
|
|Red{nbsp}Hat and AWS
|
|
|Customer responsibilities
|
|
|
|
|Customer data
|
|
|**Red{nbsp}Hat**
|
|
|
|
- Maintain platform-level standards for data encryption as defined by industry security and
|
|
compliance standards.
|
|
- Provide OpenShift components to help manage application data, such as secrets.
|
|
- Enable integration with data services such as
|
|
Amazon RDS to store and manage data outside of the cluster and/or AWS.
|
|
|
|
**AWS**
|
|
|
|
- Provide Amazon RDS to allow customers to store and manage data outside of the cluster and/or AWS.
|
|
|- Maintain responsibility for all customer data stored on the platform and how customer applications consume and expose this data.
|
|
|
|
|Customer applications
|
|
|**Red{nbsp}Hat**
|
|
|
|
- Provision clusters with OpenShift components installed so that customers can access the OpenShift and Kubernetes APIs to deploy and manage containerized applications.
|
|
- Create clusters with image pull secrets so that customer deployments can pull images from the Red{nbsp}Hat Container Catalog registry.
|
|
- Provide access to OpenShift APIs that a customer can use to set up Operators to add community, third-party, and Red{nbsp}Hat services to the cluster.
|
|
- Provide storage classes and plugins to support persistent volumes for use with customer applications.
|
|
- Provide a container image registry so customers can securely store application container images on the cluster to deploy and manage applications.
|
|
|
|
**AWS**
|
|
|
|
- Provide Amazon EBS to support persistent volumes for use with customer applications.
|
|
|
|
- Provide Amazon S3 to support Red{nbsp}Hat provisioning of the container image registry.
|
|
|
|
|- Maintain responsibility for customer and third-party applications, data, and their complete lifecycle.
|
|
- If a customer adds Red{nbsp}Hat, community, third-party, their own, or other services to the cluster by using Operators or external images, the customer is responsible for these services and for working with the appropriate provider, including Red{nbsp}Hat, to troubleshoot any issues.
|
|
- Use the provided tools and features to configure and deploy; keep up to date; set up resource requests and limits; size the cluster to have enough resources to run apps; set up permissions; integrate with other services; manage any image streams or templates that the customer deploys; externally serve; save, back up, and restore data; and otherwise manage their highly available and resilient workloads.
|
|
- Maintain responsibility for monitoring the applications run on {product-title}, including
|
|
installing and operating software to gather metrics, create alerts, and protect secrets in the application.
|
|
|
|
|===
|