Deployment assessment questionnaire
Evaluate your container environment questionnaire
Use the following questions to understand your current or targeted on-premises containerized environment:
Question | Description | Answer |
|---|---|---|
Do you have any experience with container-based infrastructure? | Evaluate your knowledge about container-based infrastructure such as orchestration platforms and technologies. Technologies such as Jenkins, Harbor, and Elasticsearch. See Recommended-skill-set-and-trainings. | |
Which container orchestration platform do you want to use? | Verify if you want to use a preferred container orchestration platform such as Kubernetes, Kubernetes and Rancher, VMWare Tanzu, Redhat OpenShift, or any other. | |
Which Kubernetes version and container runtime type do you want to use? | Verify the supported Kubernetes version and your requirements. See System-requirements. | |
Which Control group (Cgroup) version you want to use? | Verify the supported Cgroup version. See System-requirements. | |
Which external database type and version do you want to use? | External database is required if you want to deploy the Innovation suite. Verify the supported database types. See System-requirements. | |
What is the SMTP server type required for tenant email activation? | Verify the supported SMTP server type. See System-requirements. | |
Which container technologies do you use? | Specify the list of container technologies you use and include their versions, such as Docker, Helm, and Elastic. | |
Do you want to use Azure Kubernetes service? | Yes or No | |
What version of Helm do you use? | Verify the supported Helm version. See System-requirements. | |
What is the Kubernetes storage class type? | Verify the supported the storage classes. See System-requirements. | |
What is the load balancer type that you want to use? | Verify the supported load balancer types, SSL methods, and configuration requirements. See System-requirements. | |
What is the required Ingress type? | Verify the supported Ingress controller type and version. See System-requirements. | |
Are you using a stretch cluster for high availability? How do you plan for high availability and disaster recovery within your containerized deployment? | Check your high availability and disaster recovery requirements. See System-requirements. | |
Amazon Elastic Kubernetes Service | ||
What is the Kubernetes version and container runtime type? | List your requirements and verify the supported versions and configurations. See System-requirements and Deploying-BMC-Helix-IT-Operations-Management-in-an-Amazon-Elastic-Kubernetes-Service-cluster. | |
What is the Kubernetes cgroup version? | ||
What is the external database type and version? | ||
What is the SMTP server type? | ||
Do you want to use KMS encryption provider? | ||
What is the Kubernetes storage class type? | ||
What is the Ingress type and version? | ||
Google Kubernetes Engine | ||
What is the Kubernetes version and container runtime type? | List your requirements and verify the supported versions and configurations. See System-requirements and Deploying-BMC-Helix-IT-Operations-Management-in-a-Google-Kubernetes-Engine-cluster | |
What is the external database type and version? | ||
What is the SMTP server type? | ||
What is the Kubernetes storage class type? | ||
Do you want to use Google Cloud Artifact Registry? | ||
What is the Ingress type and version? | ||
OpenShift | ||
What is the OpenShift version? | List your requirements. Verify the supported versions and required cluster permissions. See System-requirements and Configuring a passthrough Ingress route for OpenShift. | |
Is Nginx Ingress controller allowed? | ||
Security requirements | ||
Which security scan tool do you use and what is your vulnerability resolution policy? | Specify your security tool details and vulnerability resolution policy such as P1, P2, and P3. | |
Do you have any UID or GID restrictions? | Specify the UID and GID restrictions. | |
Are there different cluster roles for developer, operator, and release to perform product deployments in different environments? | Specify the cluster role requirements. | |
Are the root accounts permitted? | Specify the details about Security Context Constraints (SCC) and Pod security Policies (PSP). | |
How do you access the cluster? | Specify the tool to access the cluster such as jumpbox. | |
Do you have a password security policy for virtual machines and databases? | List your security policies for virtual machines and databases. | |
What type of certificates do you use in your environment? | Specify the certificate type, self-signed or CA signed certificates. | |
Do you have any DNS restrictions? | Specify if there are any DNS restrictions, such as, wildcard certs not allowed. | |
Do you need to share your Kubernetes cluster? | Yes or No | |
Do you allow node port type services? | Yes or No | |
Are multiple namespaces allowed? | Verify the namespace requirements. See System-requirements. | |
Do you require data encryption in-use? | Yes or No | |
Do you allow cluster administrator permissions? | Yes or No | |
Are there different roles for developers, and operators, to perform product deployments in different environments? | Specify the cluster role requirements. | |
Images Docker Trusted Repository (DTR) | ||
What tools are supported to download images? | ||
Do you allow Harbor DTR? | Yes or No | |
Do you have a Docker Trusted Repository (DTR) deployed? | Yes or No Verify the Harbor repository requirements to synchronize the container images in BMC DTR to a local repository. See Setting up a Harbor repository to synchronize container images. | |
What is your image requirement policy? | Specify the container image requirement policy. | |
Do have access to the Electronic Product Distribution (EPD) site? | Ensure that you can log on to EPD by using your Support user ID and password. You might also be prompted to complete the Export Compliance Form. If you are accessing this site for the first time, create a new EPD profile to specify the languages and platforms that you want to download. For assistance with EPD, see EPD site help. | |
Hardware available for BMC Helix IT Operations Management implementation | ||
What are the hardware requirements? | Verify the hardware requirements such as minimum worker nodes, CPU, amd memory in your cluster. | |
What is the minimum worker node disk space requirement? | Verify the minimum worker node requirements for disk space. | |