Roles and responsibilities¶
Network¶
Responsibility | NAIS team | Tenant |
---|---|---|
Loadbalancers | x | |
Ingress controllers | x | |
NAIS domain certificates | x | |
Tenant domain certificates * | x | x |
Cloud armor | x | |
GCP firewalls | x | |
Network policies | x | |
Service mesh | x | |
naisdevice | x |
* The NAIS team can provide tenant domain certificates, if the tenant provides a CAA record allowing automatic issuance using Let's Encrypt.
Runtime¶
Responsibility | NAIS team | Tenant |
---|---|---|
Loadbalancers | x | |
Hardware and scaling | x | |
Kubernetes | x | |
Application containers | x | |
Application data | x |
Services¶
Responsibility | NAIS team | Tenant |
---|---|---|
Loadbalancers | x | |
Storage | x | |
Backup | x | |
Databases * | x | x |
Kafka * | x | x |
Monitoring | x | x |
Logs | x | x |
Alerts | x | x |
Deploy | x |
* The NAIS team is responsible for the underlying infrastructure, but the tenant is responsible for the data.
Administration¶
Responsibility | NAIS team | Tenant |
---|---|---|
Console * | x | x |
User sync | x | |
IDP | x |
* The NAIS team provide and maintain the console application, but the tenant is responsible for the creation and administration of teams.
Last update:
May 26, 2023
Created: May 26, 2023
Created: May 26, 2023