diff --git a/docs/docs-content/integrations/maintenance-policy.md b/docs/docs-content/integrations/maintenance-policy.md index d066e9dabb..0deb6441c5 100644 --- a/docs/docs-content/integrations/maintenance-policy.md +++ b/docs/docs-content/integrations/maintenance-policy.md @@ -10,93 +10,83 @@ tags: ["packs", "deprecation"] Palette supports two pack categories: *Infrastructure* and *Add-on*. Infrastructure packs are often sourced from third parties and are infrastructure-related or support critical container-based environments. Packs are used to create layers in cluster profiles. Infrastructure packs are grouped as follows: -- Kubernetes - - Operating System (OS) - +- Kubernetes - Container Network Interface (CNI) - - Container Storage Interface (CSI) Add-on packs provide additional functionality that you can add to your cluster profile and are grouped as follows: -- Load Balancer - +- Authentication - Ingress - +- Load balancer - Logging - - Monitoring - - Security - -- Authentication - -- System Apps +- Service mesh +- System apps Check out the [Packs List](integrations.mdx) document, where you can use the filter buttons to display a list of Palette packs in each category and learn about the individual packs. ## Pack Updates -Packs undergo rigorous vulnerability scans and penetration testing before they become available in Palette. The following sections describe our update schedule for each infrastructure pack category. - - -### Kubernetes Packs - -We provide Cloud Native Computing Foundation (CNCF) Kubernetes updates as follows: - -- **Major versions**: Assessed based on the extent of changes. - -- **Minor versions**: Provided within eight weeks of a new Kubernetes release. - -- **Patch versions**: Provided within four weeks of a new Kubernetes release. - +Packs undergo rigorous vulnerability scans and penetration testing before they become available in Palette. The following sections describe our update schedule for each infrastructure pack category. For update information about verified packs, review [Palette Verified Packs](verified_packs.md). ### OS Packs We provide Ubuntu LTS and CentOS updates for IaaS clusters as follows: -- **Major versions** - Added within eight weeks of release. +| **Update Version** | **Schedule** | +|--------------------------|------------------------| +| **Major** | Added within eight weeks of release. | +| **Minor & Patch** | Updated at runtime using Palette’s on-demand or scheduled OS upgrades and patch-on-boot capabilities. | -- **Patch and Minor versions**: Updated at runtime using Palette’s on-demand or scheduled OS upgrades and patch-on-boot capabilities. +### Kubernetes Packs +We provide Cloud Native Computing Foundation (CNCF) Kubernetes updates as follows: -### CNI Packs +| **Update Version** | **Schedule** | +|----------------------|------------------------| +| **Major** | Assessed based on the extent of changes. | +| **Minor** | Provided within eight weeks of a new Kubernetes release. | +| **Patch** | Provided within four weeks of a new Kubernetes release. | -We provide CNI pack updates as follows: -- **Major versions**: Assessed based on the extent of changes. +### CNI Packs -- **Minor version**: Added within six weeks of release. +We provide CNI pack updates as follows: -- **Patch versions**: Added within four weeks of release. +| **Update Version** | **Schedule** | +|----------------------|------------------------| +| **Major** | Assessed based on the extent of changes. | +| **Minor** | Provided within six weeks of release. | +| **Patch** | Provided within four weeks of release. | ### CSI Packs We provide CSI pack updates as follows: -- **Major versions**: Assessed based on the extent of changes. - -- **Minor version**: Added within six weeks of release. - -- **Patch versions**: Added within four weeks of release. +| **Update Version** | **Schedule** | +|----------------------|------------------------| +| **Major** | Assessed based on the extent of changes. | +| **Minor** | Provided within six weeks of release. | +| **Patch** | Provided within four weeks of release. | ### Add-on Packs We provide add-on pack updates as follows: - -- **Major versions**: Assessed based on the extent of changes. - -- **Minor version**: Added within six weeks of release. - -- **Patch versions**: Added within four weeks of release. +| **Update Version** | **Schedule** | +|----------------------|------------------------| +| **Major** | Assessed based on the extent of changes. | +| **Minor** | Provided within six weeks of release. | +| **Patch** | Provided within four weeks of release. | ## Pack Deprecations diff --git a/docs/docs-content/integrations/verified_packs.md b/docs/docs-content/integrations/verified_packs.md new file mode 100644 index 0000000000..9c32a55abc --- /dev/null +++ b/docs/docs-content/integrations/verified_packs.md @@ -0,0 +1,27 @@ +--- +sidebar_label: "Verified Packs" +title: "Verified Packs" +description: "Identify Verified Packs in Palette, which undergo active maintenance." +icon: "" +hide_table_of_contents: false +sidebar_position: 10 +tags: ["packs", "verified"] +--- + + +Palette Verified Packs are packs we build and actively maintain with continuous updates and monitoring for security vulnerabilities. We use our extensive knowledge to ensure verified packs are configured according to best practices. We offer verified packs across the spectrum of a typical cluster profile stack - from the Operating System (OS) layer up to application layers. Verified packs are readily recognized in Palette by the green shield icon that distinguishes them from other packs. + +![A screenshot of several Verified Packs with a green shield icon.](/integrations_verified-packs-green-check.png) + + +### Verified Pack Updates + +Verified packs are updated every six to eight weeks to ensure they are always current. These updates include necessary software updates and configuration adjustments. Additionally, our OS and Kubernetes packs are hardened using Center for Internet Security (CIS) standards, and we update them periodically to align with best practices. If any pack is found to have a security issue, we quickly address it and, depending on the severity of the issue, we may release a patch fix. To address patch fixes, we have established a weekly hotfix release schedule to flexibly roll out urgent fixes as needed. + +To learn about our general pack maintenance policy, review the [Maintenance Policy](maintenance-policy.md) reference. + +:::info + +Palette paid subscriptions cover access to our Support team and product updates. + +::: diff --git a/static/assets/docs/images/integrations_verified-packs-green-check.png b/static/assets/docs/images/integrations_verified-packs-green-check.png new file mode 100644 index 0000000000..636bc0e8db Binary files /dev/null and b/static/assets/docs/images/integrations_verified-packs-green-check.png differ