Skip to content

Commit

Permalink
Document Verified Packs (#1749)
Browse files Browse the repository at this point in the history
* Draft verified packs, add screenshot

* Replace bullet lists with tables

* Cross link two docs

* Ensure required language is used

* Fix typo

* Optimised images with calibre/image-actions

* Address review comments

* Incorporated more comments

* Revised info block about Support

* Update verified_packs.md

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: antongisli <anton@spectrocloud.com>
(cherry picked from commit a1daa3c)
  • Loading branch information
ritawatson committed Nov 8, 2023
1 parent a0c3099 commit c0672c7
Show file tree
Hide file tree
Showing 3 changed files with 61 additions and 44 deletions.
78 changes: 34 additions & 44 deletions docs/docs-content/integrations/maintenance-policy.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,93 +10,83 @@ tags: ["packs", "deprecation"]

Palette supports two pack categories: *Infrastructure* and *Add-on*. Infrastructure packs are often sourced from third parties and are infrastructure-related or support critical container-based environments. Packs are used to create layers in cluster profiles. Infrastructure packs are grouped as follows:

- Kubernetes

- Operating System (OS)

- Kubernetes
- Container Network Interface (CNI)

- Container Storage Interface (CSI)


Add-on packs provide additional functionality that you can add to your cluster profile and are grouped as follows:

- Load Balancer

- Authentication
- Ingress

- Load balancer
- Logging

- Monitoring

- Security

- Authentication

- System Apps
- Service mesh
- System apps


Check out the [Packs List](integrations.mdx) document, where you can use the filter buttons to display a list of Palette packs in each category and learn about the individual packs.

## Pack Updates

Packs undergo rigorous vulnerability scans and penetration testing before they become available in Palette. The following sections describe our update schedule for each infrastructure pack category.


### Kubernetes Packs

We provide Cloud Native Computing Foundation (CNCF) Kubernetes updates as follows:

- **Major versions**: Assessed based on the extent of changes.

- **Minor versions**: Provided within eight weeks of a new Kubernetes release.

- **Patch versions**: Provided within four weeks of a new Kubernetes release.

Packs undergo rigorous vulnerability scans and penetration testing before they become available in Palette. The following sections describe our update schedule for each infrastructure pack category. For update information about verified packs, review [Palette Verified Packs](verified_packs.md).


### OS Packs

We provide Ubuntu LTS and CentOS updates for IaaS clusters as follows:

- **Major versions** - Added within eight weeks of release.
| **Update Version** | **Schedule** |
|--------------------------|------------------------|
| **Major** | Added within eight weeks of release. |
| **Minor & Patch** | Updated at runtime using Palette’s on-demand or scheduled OS upgrades and patch-on-boot capabilities. |


- **Patch and Minor versions**: Updated at runtime using Palette’s on-demand or scheduled OS upgrades and patch-on-boot capabilities.
### Kubernetes Packs

We provide Cloud Native Computing Foundation (CNCF) Kubernetes updates as follows:

### CNI Packs
| **Update Version** | **Schedule** |
|----------------------|------------------------|
| **Major** | Assessed based on the extent of changes. |
| **Minor** | Provided within eight weeks of a new Kubernetes release. |
| **Patch** | Provided within four weeks of a new Kubernetes release. |

We provide CNI pack updates as follows:

- **Major versions**: Assessed based on the extent of changes.
### CNI Packs

- **Minor version**: Added within six weeks of release.
We provide CNI pack updates as follows:

- **Patch versions**: Added within four weeks of release.
| **Update Version** | **Schedule** |
|----------------------|------------------------|
| **Major** | Assessed based on the extent of changes. |
| **Minor** | Provided within six weeks of release. |
| **Patch** | Provided within four weeks of release. |


### CSI Packs

We provide CSI pack updates as follows:

- **Major versions**: Assessed based on the extent of changes.

- **Minor version**: Added within six weeks of release.

- **Patch versions**: Added within four weeks of release.
| **Update Version** | **Schedule** |
|----------------------|------------------------|
| **Major** | Assessed based on the extent of changes. |
| **Minor** | Provided within six weeks of release. |
| **Patch** | Provided within four weeks of release. |


### Add-on Packs

We provide add-on pack updates as follows:


- **Major versions**: Assessed based on the extent of changes.

- **Minor version**: Added within six weeks of release.

- **Patch versions**: Added within four weeks of release.
| **Update Version** | **Schedule** |
|----------------------|------------------------|
| **Major** | Assessed based on the extent of changes. |
| **Minor** | Provided within six weeks of release. |
| **Patch** | Provided within four weeks of release. |


## Pack Deprecations
Expand Down
27 changes: 27 additions & 0 deletions docs/docs-content/integrations/verified_packs.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
---
sidebar_label: "Verified Packs"
title: "Verified Packs"
description: "Identify Verified Packs in Palette, which undergo active maintenance."
icon: ""
hide_table_of_contents: false
sidebar_position: 10
tags: ["packs", "verified"]
---


Palette Verified Packs are packs we build and actively maintain with continuous updates and monitoring for security vulnerabilities. We use our extensive knowledge to ensure verified packs are configured according to best practices. We offer verified packs across the spectrum of a typical cluster profile stack - from the Operating System (OS) layer up to application layers. Verified packs are readily recognized in Palette by the green shield icon that distinguishes them from other packs.

![A screenshot of several Verified Packs with a green shield icon.](/integrations_verified-packs-green-check.png)


### Verified Pack Updates

Verified packs are updated every six to eight weeks to ensure they are always current. These updates include necessary software updates and configuration adjustments. Additionally, our OS and Kubernetes packs are hardened using Center for Internet Security (CIS) standards, and we update them periodically to align with best practices. If any pack is found to have a security issue, we quickly address it and, depending on the severity of the issue, we may release a patch fix. To address patch fixes, we have established a weekly hotfix release schedule to flexibly roll out urgent fixes as needed.

To learn about our general pack maintenance policy, review the [Maintenance Policy](maintenance-policy.md) reference.

:::info

Palette paid subscriptions cover access to our Support team and product updates.

:::
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit c0672c7

Please sign in to comment.