Roles and responsibilities¶
Network¶
| Responsibility | NAIS team | Tenant |
|---|---|---|
| Loadbalancers | x | |
| Ingress controllers | x | |
| NAIS domain certificates | x | |
| Tenant domain certificates * | x | x |
| Cloud armor | x | |
| GCP firewalls | x | |
| Network policies | x | |
| Service mesh | x | |
| naisdevice | x |
* The NAIS team can provide tenant domain certificates, if the tenant provides a CAA record allowing automatic issuance using Let's Encrypt.
Runtime¶
| Responsibility | NAIS team | Tenant |
|---|---|---|
| Loadbalancers | x | |
| Hardware and scaling | x | |
| Kubernetes | x | |
| Application containers | x | |
| Application data | x |
Services¶
| Responsibility | NAIS team | Tenant |
|---|---|---|
| Loadbalancers | x | |
| Storage | x | |
| Backup | x | |
| Databases * | x | x |
| Kafka * | x | x |
| Monitoring | x | x |
| Logs | x | x |
| Alerts | x | x |
| Deploy | x |
* The NAIS team is responsible for the underlying infrastructure, but the tenant is responsible for the data.
Administration¶
| Responsibility | NAIS team | Tenant |
|---|---|---|
| Console * | x | x |
| User sync | x | |
| IDP | x |
* The NAIS team provide and maintain the console application, but the tenant is responsible for the creation and administration of teams.
Last update:
May 26, 2023
Created: May 26, 2023
Created: May 26, 2023