Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
40 commits
Select commit Hold shift + click to select a range
88ede08
[DRAFT] Create scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei Apr 26, 2024
5e0742d
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei Apr 26, 2024
9a1c2cd
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei Apr 26, 2024
e0c87bf
Apply suggestions from code review
josephineSei Apr 29, 2024
41a75a2
edit more wording
josephineSei Apr 29, 2024
020bf8b
change gloassary section to table
josephineSei Apr 29, 2024
f0f75cb
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei May 2, 2024
d475eb1
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei May 2, 2024
04be929
editing table of classifictaion, as we discussed in the meeting
josephineSei May 24, 2024
367d992
Apply suggestions from code review
josephineSei May 28, 2024
b190440
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei May 28, 2024
525d9e8
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei Jun 12, 2024
ba729d4
K8s failure cases
cah-hbaum Jun 24, 2024
fbca525
Extend glossary with K8s terms and split into sections
martinmo Jun 24, 2024
2777c6a
Categorize the failure scenarios & try to add structure
martinmo Jun 24, 2024
a9633b1
Distinguish between impacts on IaaS and KaaS layer
martinmo Jun 24, 2024
d3fea7f
Merge branch 'main' into taxonomy-of-failsafe-levels
martinmo Jun 24, 2024
9dfb9c0
Fix markdownlint error
martinmo Jun 24, 2024
9d22126
Apply restructuring suggestions by Josephine
martinmo Jul 8, 2024
437217f
Further work on taxonomy draft (WIP)
martinmo Jul 8, 2024
b904df0
Adding glossary at the right point
josephineSei Aug 16, 2024
57b1d30
Extend the context and glossary and make a better consequences table …
josephineSei Aug 16, 2024
05418ff
Merge branch 'main' into taxonomy-of-failsafe-levels
josephineSei Aug 16, 2024
36c0d7f
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei Aug 19, 2024
2d1663b
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei Aug 22, 2024
358b429
Create scs-XXXX-v1-example-impacts-of-failure-scenarios.md
josephineSei Aug 23, 2024
dcd910b
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei Aug 23, 2024
d375608
Merge branch 'main' into taxonomy-of-failsafe-levels
josephineSei Aug 23, 2024
9d59e63
Merge branch 'main' into taxonomy-of-failsafe-levels
josephineSei Aug 26, 2024
1f3de87
Update and rename scs-XXXX-v1-example-impacts-of-failure-scenarios.md…
josephineSei Aug 26, 2024
2a492f8
Update scs-XXXX-w1-example-impacts-of-failure-scenarios.md
josephineSei Aug 26, 2024
53c6521
Apply suggestions from code review
josephineSei Sep 6, 2024
90e311d
Merge branch 'main' into taxonomy-of-failsafe-levels
josephineSei Sep 10, 2024
0e39254
fix(kaas): use PV instead of PVC as this is actually the Volume
jschoone Sep 10, 2024
2a52226
feat(kaas): first proposal for levels on kaas layer
jschoone Sep 10, 2024
1fbab3a
Merge branch 'main' into taxonomy-of-failsafe-levels
josephineSei Sep 25, 2024
5ffe31a
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei Sep 25, 2024
7931127
Update scs-XXXX-vN-taxonomy-of-failsafe-levels.md
josephineSei Sep 25, 2024
ee531ad
Rename scs-XXXX-vN-taxonomy-of-failsafe-levels.md to scs-0118-v1-taxo…
josephineSei Sep 25, 2024
37ec252
Update and rename scs-XXXX-w1-example-impacts-of-failure-scenarios.md…
josephineSei Sep 25, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 17 additions & 21 deletions Standards/scs-XXXX-vN-taxonomy-of-failsafe-levels.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,30 +12,26 @@ When talking about redundancy and backups in the context of cloud infrastructure
This decision record aims to define different levels of failure-safety.
These levels can then be used in standards to clearly set the scope that certain procedures in e.g. OpenStack offer.

## Terminology

Image
OpenStack resource, virtual machine images usually residing in a network storage backend.
Volume
OpenStack resource, virtual drive which usually resides in a network storage backend.
Virtual Machine (abbr. VM)
IaaS resource, also called server, executes workloads from users.
Secret
OpenStack ressource, cryptographic asset stored in the Key Manager (e.g. Barbican).
Key Encryption Key (abbr. KEK)
OpenStack resource, used to encrypt other keys to be able to store them encrypted in a database.
Floating IP (abbr. FIP)
OpenStack resource, an IP that is usually routed and accessible from external networks.
Disk
A physical disk drive (e.g. HDD, SSD) in the infrastructure.
Node
A physical machine in the infrastructure.
Cyber threat
Attacks on the infrastructure through the means of electronic access.
## Glossary

| Term | Explanation |
| ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------- |
| Virtual Machine | Equals the `server` resource in Nova. |
| Ephemeral Storage | Disk storage directly supplied to a virtual machine by Nova. Different from volumes. |
| (Glance) Image | IaaS resource usually storing raw disk data. Managed by the Glance service. |
| (Cinder) Volume | IaaS resource representing block storage disk that can be attached as a virtual disk to virtual machines. Managed by the Cinder service. |
| (Volume) Snapshot | Thinly-provisioned copy-on-write snapshots of volumes. Stored in the same Cinder storage backend as volumes. |
| Volume Type | Attribute of volumes determining storage details of a volume such as backend location or whether the volume will be encrypted. |
| (Barbican) Secret | IaaS resource storing cryptographic assets such as encryption keys. Managed by the Barbican service. |
| Key Encryption Key | IaaS resource, used to encrypt other keys to be able to store them encrypted in a database. |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I a key encryption key really an IaaS resource? I thought key encryption keys are stored in configuration files and if this is the case, it is a configuration setting.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Glossary is for all maybe unknown phrases to be described. As this standard also concerns Key Encryption Keys, it should be noted in the glossary

| Floating IP | IaaS resource, an IP that is usually routed and accessible from external networks. |
| Disk | A physical disk drive (e.g. HDD, SSD) in the infrastructure. |
| Node | A physical machine in the infrastructure. |
| Cyber threat | Attacks on the infrastructure through the means of electronic access. |

## Context

Some standards provided by the SCS will talk about or require procedures to backup resources or have redundancy for resources.
Some standards provided by the SCS project will talk about or require procedures to backup resources or have redundancy for resources.
This decision record should discuss, which failure threats are CSP-facing and will classify them into several levels.
In consequence these levels should be used in standards concerning redundancy or failure-safety.

Expand Down