Skip to content

Roles and responsibilities

Network

Responsibility NAIS team Tenant
Loadbalancers x
Ingress controllers x
NAIS domain certificates x
Tenant domain certificates * x x
Cloud armor x
GCP firewalls x
Network policies x
Service mesh x
naisdevice x

* The NAIS team can provide tenant domain certificates, if the tenant provides a CAA record allowing automatic issuance using Let's Encrypt.

Runtime

Responsibility NAIS team Tenant
Loadbalancers x
Hardware and scaling x
Kubernetes x
Application containers x
Application data x

Services

Responsibility NAIS team Tenant
Loadbalancers x
Storage x
Backup x
Databases * x x
Kafka * x x
Monitoring x x
Logs x x
Alerts x x
Deploy x

* The NAIS team is responsible for the underlying infrastructure, but the tenant is responsible for the data.

Administration

Responsibility NAIS team Tenant
Console * x x
User sync x
IDP x

* The NAIS team provide and maintain the console application, but the tenant is responsible for the creation and administration of teams.


Last update: May 26, 2023
Created: May 26, 2023