Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document Verified Packs #1749

Merged
merged 14 commits into from
Nov 8, 2023
78 changes: 50 additions & 28 deletions docs/docs-content/integrations/maintenance-policy.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,93 +10,115 @@ tags: ["packs", "deprecation"]

Palette supports two pack categories: *Infrastructure* and *Add-on*. Infrastructure packs are often sourced from third parties and are infrastructure-related or support critical container-based environments. Packs are used to create layers in cluster profiles. Infrastructure packs are grouped as follows:

- Kubernetes

- Operating System (OS)

- Kubernetes
- Container Network Interface (CNI)

- Container Storage Interface (CSI)


Add-on packs provide additional functionality that you can add to your cluster profile and are grouped as follows:
ritawatson marked this conversation as resolved.
Show resolved Hide resolved

- Load Balancer

- Authentication
- Ingress

- Load Balancer
ritawatson marked this conversation as resolved.
Show resolved Hide resolved
- Logging

- Monitoring

- Security

- Authentication

- Service Mesh
ritawatson marked this conversation as resolved.
Show resolved Hide resolved
- System Apps
ritawatson marked this conversation as resolved.
Show resolved Hide resolved


Check out the [Packs List](integrations.mdx) document, where you can use the filter buttons to display a list of Palette packs in each category and learn about the individual packs.

## Pack Updates

Packs undergo rigorous vulnerability scans and penetration testing before they become available in Palette. The following sections describe our update schedule for each infrastructure pack category.
Packs undergo rigorous vulnerability scans and penetration testing before they become available in Palette. The following sections describe our update schedule for each infrastructure pack category. For update information about verified packs, review [Palette Verified Packs](verified_packs.md).


### Kubernetes Packs
### OS Packs

We provide Cloud Native Computing Foundation (CNCF) Kubernetes updates as follows:
We provide Ubuntu LTS and CentOS updates for IaaS clusters as follows:

- **Major versions**: Assessed based on the extent of changes.
| **Update Version** | **Schedule** |
|--------------------------|------------------------|
| **Major** | Added within eight weeks of release. |
| **Minor & Patch** | Updated at runtime using Palette鈥檚 on-demand or scheduled OS upgrades and patch-on-boot capabilities. |

- **Minor versions**: Provided within eight weeks of a new Kubernetes release.
<!-- - **Major versions** - Added within eight weeks of release.

- **Patch versions**: Provided within four weeks of a new Kubernetes release.
- **Patch and Minor versions**: Updated at runtime using Palette鈥檚 on-demand or scheduled OS upgrades and patch-on-boot capabilities. -->


### Kubernetes Packs

### OS Packs
We provide Cloud Native Computing Foundation (CNCF) Kubernetes updates as follows:

We provide Ubuntu LTS and CentOS updates for IaaS clusters as follows:
| **Update Version** | **Schedule** |
|----------------------|------------------------|
| **Major** | Assessed based on the extent of changes. |
| **Minor** | Provided within eight weeks of a new Kubernetes release. |
| **Patch** | Provided within four weeks of a new Kubernetes release. |

- **Major versions** - Added within eight weeks of release.


- **Patch and Minor versions**: Updated at runtime using Palette鈥檚 on-demand or scheduled OS upgrades and patch-on-boot capabilities.
<!-- - **Major versions**: Assessed based on the extent of changes.

- **Minor versions**: Provided within eight weeks of a new Kubernetes release.

- **Patch versions**: Provided within four weeks of a new Kubernetes release. -->



### CNI Packs

We provide CNI pack updates as follows:

- **Major versions**: Assessed based on the extent of changes.
| **Update Version** | **Schedule** |
|----------------------|------------------------|
| **Major** | Assessed based on the extent of changes. |
| **Minor** | Provided within six weeks of release. |
| **Patch** | Provided within four weeks of release. |

<!-- - **Major versions**: Assessed based on the extent of changes.

- **Minor version**: Added within six weeks of release.

- **Patch versions**: Added within four weeks of release.
- **Patch versions**: Added within four weeks of release. -->


### CSI Packs

We provide CSI pack updates as follows:

- **Major versions**: Assessed based on the extent of changes.
| **Update Version** | **Schedule** |
|----------------------|------------------------|
| **Major** | Assessed based on the extent of changes. |
| **Minor** | Provided within six weeks of release. |
| **Patch** | Provided within four weeks of release. |

<!-- - **Major versions**: Assessed based on the extent of changes.

- **Minor version**: Added within six weeks of release.

- **Patch versions**: Added within four weeks of release.

-->

### Add-on Packs

We provide add-on pack updates as follows:

| **Update Version** | **Schedule** |
|----------------------|------------------------|
| **Major** | Assessed based on the extent of changes. |
| **Minor** | Provided within six weeks of release. |
| **Patch** | Provided within four weeks of release. |

- **Major versions**: Assessed based on the extent of changes.

<!-- - **Major versions**: Assessed based on the extent of changes.

- **Minor version**: Added within six weeks of release.

- **Patch versions**: Added within four weeks of release.
- **Patch versions**: Added within four weeks of release. -->


## Pack Deprecations
Expand Down
29 changes: 29 additions & 0 deletions docs/docs-content/integrations/verified_packs.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
---
sidebar_label: "Palette Verified Packs"
title: "Palette Verified Packs"
ritawatson marked this conversation as resolved.
Show resolved Hide resolved
description: "Identify Palette Verified Packs and ... ."
ritawatson marked this conversation as resolved.
Show resolved Hide resolved
icon: ""
hide_table_of_contents: false
sidebar_position: 10
tags: ["packs", "verified"]
---


Palette Verified Packs are packs that we at Spectro Cloud build and actively maintain with continuous updates and monitoring for security vulnerabilities. We use our extensive knowledge to ensure verified packs are configured according to best practices. We offer verified packs across the spectrum of a typical cluster profile stack - from the Operating System (OS) layer up to application layers. Verified packs are easily recognized in Palette by the green shield icon that distinguishes them from other packs.
ritawatson marked this conversation as resolved.
Show resolved Hide resolved
ritawatson marked this conversation as resolved.
Show resolved Hide resolved

![A screenshot of several Verified Packs with a green shield icon.](/integrations_verified-packs-green-check.png)


### Verified Pack Updates

Verified packs are updated every six to eight weeks to ensure they are always current. These updates include any necessary configuration adjustments. Additionally, our OS and Kubernetes packs are hardened using Center for Internet Security (CIS) standards, and we update them periodically to align with best practices. If any pack is found to have a security issue, we quickly address it and, depending on the severity of the issue, we may release a patch fix. To address patch fixes, we have established a weekly hotfix release schedule to flexibly roll out urgent fixes as needed.
ritawatson marked this conversation as resolved.
Show resolved Hide resolved

Where relevant, any recently identified critical, high, or medium concerns will be addressed in an upcoming minor release, which occurs independent of Palette release timelines.

To learn about our general pack maintenance policy, review the [Maintenance Policy](maintenance-policy.md) reference.

:::info

Your Spectro Cloud Palette subscription covers access to our Support team and product updates.
ritawatson marked this conversation as resolved.
Show resolved Hide resolved

:::
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.