add Private Operator Upgrade Policy

genwhittTTD · genwhittTTD · commit 9ced758d52e6 · 2025-06-25T17:16:14.000-04:00
diff --git a/docs/guides/integration-options-private-operator.md b/docs/guides/integration-options-private-operator.md
@@ -6,6 +6,8 @@ hide_table_of_contents: false
 
 import Link from '@docusaurus/Link';
 
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
+
 # UID2 Private Operator Integration Overview
 
 UID2 participants that host their own <Link href="../ref-info/glossary-uid#gl-private-operator">Private Operator</Link> send their own first-party <Link href="../ref-info/glossary-uid#gl-dii">directly identifying information (DII)</Link> to their own local UID2 <Link href="../ref-info/glossary-uid#gl-operator">Operator</Link> service, running in a private environment.
@@ -83,6 +85,10 @@ There are a couple of limitations to Private Operator functionality:
 - Private Operators do not currently support <Link href="../ref-info/glossary-uid#gl-client-side">client-side integration</Link>.
 - Private Operator updates are released three times per year; Public Operator updates are released on a more frequent cadence.
 
+## Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
 ## Getting Started
 
 To get started as a Private Operator, follow these steps:
diff --git a/docs/guides/operator-guide-aks-enclave.md b/docs/guides/operator-guide-aks-enclave.md
@@ -8,6 +8,7 @@ sidebar_position: 18
 ---
 
 import Link from '@docusaurus/Link';
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
 import ReleaseMatrix from '../snippets/_private-operator-release-matrix.mdx';
 
 # UID2 Private Operator for AKS Integration Guide
@@ -79,6 +80,10 @@ You'll receive separate `{OPERATOR_KEY}` values for each environment. Be sure to
 | Integration (`integ`) | For testing only. Debug mode is available in the integration environment. |
 | Production (`prod`) | For managing production traffic. |
 
+## Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
 ## Deployment
 
 To deploy a new UID2 Private Operator for AKS, you'll need to complete the following high-level steps:
diff --git a/docs/guides/operator-guide-aws-marketplace.md b/docs/guides/operator-guide-aws-marketplace.md
@@ -8,6 +8,7 @@ sidebar_position: 17
 ---
 
 import Link from '@docusaurus/Link';
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
 import ReleaseMatrix from '../snippets/_private-operator-release-matrix.mdx';
 import AttestFailure from '../snippets/_private-operator-attest-failure.mdx';
 
@@ -162,6 +163,10 @@ To deploy UID2 Operator on AWS Marketplace, complete the following steps:
 
 It takes several minutes for the stack to be created. When you see an Auto Scaling Group (ASG) created, you can select it and check the EC2 instances. By default, there is only one instance to start with.
 
+### Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
 ### Operator Version
 
 The latest ZIP file is linked in the Release Notes column in the following table.
diff --git a/docs/guides/operator-guide-azure-enclave.md b/docs/guides/operator-guide-azure-enclave.md
@@ -8,6 +8,7 @@ sidebar_position: 18
 ---
 
 import Link from '@docusaurus/Link';
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
 import ReleaseMatrix from '../snippets/_private-operator-release-matrix.mdx';
 
 # UID2 Private Operator for Azure Integration Guide
@@ -93,6 +94,10 @@ The first step is to get set up with the deployment files you'll need:
    - `operator.json` and `operator.parameters.json`
    - `gateway.json` and `gateway.parameters.json`
 
+### Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
 ### Operator Version
 
 The latest ZIP file is linked in the Azure Download column in the following table.
diff --git a/docs/guides/operator-private-gcp-confidential-space.md b/docs/guides/operator-private-gcp-confidential-space.md
@@ -8,6 +8,7 @@ sidebar_position: 18
 ---
 
 import Link from '@docusaurus/Link';
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
 import ReleaseMatrix from '../snippets/_private-operator-release-matrix.mdx';
 
 # UID2 Private Operator for GCP Integration Guide
@@ -87,7 +88,11 @@ When UID2 account registration is complete, and you've installed the gcloud CLI,
 -  Review information about [deployment environments](#deployment-environments).
 -  Review information about the [deployment options](#deployment-options) available, including the benefits of each, and decide which to use.
 
-### Operator Versions
+### Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
+### Operator Version
 
 The latest ZIP file is linked in the GCP Download column in the following table.
 
@@ -175,7 +180,7 @@ Install Terraform if it is not already installed: visit [terraform.io](https://w
 
 #### Download the Template Files
 
-Download the ZIP file listed in [Operator Versions](#operator-versions) in the GCP Download column. Be sure to select the latest version. Unzip the files to a convenient location. You will have the files listed in the following table.
+Download the ZIP file listed in [Operator Version](#operator-version) in the GCP Download column. Be sure to select the latest version. Unzip the files to a convenient location. You will have the files listed in the following table.
 
 | File | Details |
 | :--- | :--- |
@@ -401,7 +406,7 @@ Placeholder values are defined in the following table.
 | `{ZONE}` | The Google Cloud zone that the VM instance will be deployed on. |
 | `{IMAGE_FAMILY}` | Use `confidential-space` for Integration and Production, `confidential-space-debug` for debugging purposes in Integration only. Note that `confidential-space-debug` will not work in Production. |
 | `{SERVICE_ACCOUNT}` | The service account email that you created as part of creating your account, in this format: `{SERVICE_ACCOUNT_NAME}@{PROJECT_ID}.iam.gserviceaccount.com`.<br/>For details, see [Set Up Service Account Rules and Permissions](#set-up-service-account-rules-and-permissions) (Step 4). |
-| `{OPERATOR_IMAGE}` | The Docker image URL for the UID2 Private Operator for GCP, used in configuration.<br/>This can be found in the `terraform.tfvars` file in the GCP download file (see [Operator Versions](#operator-versions)). |
+| `{OPERATOR_IMAGE}` | The Docker image URL for the UID2 Private Operator for GCP, used in configuration.<br/>This can be found in the `terraform.tfvars` file in the GCP download file (see [Operator Version](#operator-version)). |
 | `{OPERATOR_KEY_SECRET_FULL_NAME}` | The full name that you specified for the Operator Key secret (see [Create Secret for the Operator Key in Secret Manager](#create-secret-for-the-operator-key-in-secret-manager)), including the path, in the format `projects/<project_id>/secrets/<secret_id>/versions/<version>`. For example: `projects/111111111111/secrets/uid2-operator-operator-key-secret-integ/versions/1`. |
 
 ##### Sample Deployment Script&#8212;Integ
diff --git a/docs/snippets/_private-operator-upgrade-policy.mdx b/docs/snippets/_private-operator-upgrade-policy.mdx
@@ -0,0 +1,7 @@
+<!-- Used by: All Private Operator guides plus Private Operator overview (guides/integration-options-private-operator.md) -->
+
+To maintain security and operational integrity, outdated operator versions will be disabled after 12 months, which may cause affected deployments to shut down or fail to start. Upgrading ensures the use of the latest security and feature enhancements. We recommend upgrading proactively to avoid disruptions.
+
+:::note
+For critical security or operational issues, or where contract terms apply, we reserve the right to enforce tighter upgrade timelines for private operators.
+:::
diff --git a/i18n/ja/docusaurus-plugin-content-docs/current/guides/integration-options-private-operator.md b/i18n/ja/docusaurus-plugin-content-docs/current/guides/integration-options-private-operator.md
@@ -5,6 +5,7 @@ hide_table_of_contents: false
 ---
 
 import Link from '@docusaurus/Link';
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
 
 # UID2 Private Operator Integration Overview
 
@@ -83,6 +84,10 @@ Private Operator にはいくつかの制限があります:
 - Private Operator は、現在、<Link href="../ref-info/glossary-uid#gl-client-side">client-side integration</Link>　をサポートしていません。
 - Private Operator の更新は、年に 3 回リリースされます; Public Operator の更新は、より頻繁にリリースされます。
 
+## Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
 ## Getting Started
 
 Private Operator を開始するには、次の手順に従います:
diff --git a/i18n/ja/docusaurus-plugin-content-docs/current/guides/operator-guide-aks-enclave.md b/i18n/ja/docusaurus-plugin-content-docs/current/guides/operator-guide-aks-enclave.md
@@ -8,6 +8,7 @@ sidebar_position: 18
 ---
 
 import Link from '@docusaurus/Link';
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
 import ReleaseMatrix from '../snippets/_private-operator-release-matrix.mdx';
 
 # UID2 Private Operator for AKS Integration Guide
@@ -79,6 +80,11 @@ Kubernetesの `kubectl` コマンドラインインターフェイスをイン
 | Integration (`integ`) | テスト専用です。デバックモードはテスト環境で利用可能です。 |
 | Production (`prod`) | 本番トラフィックを管理するためのものです。 |
 
+
+## Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
 ## Deployment
 
 AKS の新しい UID2 Private Operator をデプロイするには、次の主要な手順を完了する必要があります:
diff --git a/i18n/ja/docusaurus-plugin-content-docs/current/guides/operator-guide-aws-marketplace.md b/i18n/ja/docusaurus-plugin-content-docs/current/guides/operator-guide-aws-marketplace.md
@@ -8,6 +8,7 @@ sidebar_position: 17
 ---
 
 import Link from '@docusaurus/Link';
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
 import ReleaseMatrix from '../snippets/_private-operator-release-matrix.mdx';
 import AttestFailure from '../snippets/_private-operator-attest-failure.mdx';
 
@@ -162,6 +163,10 @@ UID2 Operator を AWS Marketplace にデプロイするには、以下の手順
 
 スタックの作成には数分かかります。Auto Scaling Group (ASG) が作成されたら、選択して EC2 インスタンスを確認できます。デフォルトでは、最初は 1 つのインスタンスのみが起動します。
 
+### Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
 ### Operator Version
 
 最新の ZIP ファイルは、次の表の Release Notes 欄にリンクされています。
diff --git a/i18n/ja/docusaurus-plugin-content-docs/current/guides/operator-guide-azure-enclave.md b/i18n/ja/docusaurus-plugin-content-docs/current/guides/operator-guide-azure-enclave.md
@@ -8,6 +8,7 @@ sidebar_position: 18
 ---
 
 import Link from '@docusaurus/Link';
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
 import ReleaseMatrix from '../snippets/_private-operator-release-matrix.mdx';
 
 # UID2 Private Operator for Azure Integration Guide
@@ -93,6 +94,10 @@ Azure CLI をインストールします。詳細は、Azure ドキュメント
    - `operator.json` and `operator.parameters.json`
    - `gateway.json` and `gateway.parameters.json`
 
+### Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
 ### Operator Version
 
 最新の ZIP ファイルは、次の表の Azure Download 列にリンクされています。
diff --git a/i18n/ja/docusaurus-plugin-content-docs/current/guides/operator-private-gcp-confidential-space.md b/i18n/ja/docusaurus-plugin-content-docs/current/guides/operator-private-gcp-confidential-space.md
@@ -8,6 +8,7 @@ sidebar_position: 18
 ---
 
 import Link from '@docusaurus/Link';
+import UpgradePolicy from '../snippets/_private-operator-upgrade-policy.mdx';
 import ReleaseMatrix from '../snippets/_private-operator-release-matrix.mdx';
 
 # UID2 Private Operator for GCP Integration Guide
@@ -87,7 +88,11 @@ UID2 アカウント登録が完了し、gcloud CLI をインストールした
 - [deployment environments](#deployment-environments) に関する情報を確認します。
 - 利用可能な[deployment options](#deployment-options) に関する情報を確認し、それぞれの利点を比較して、使用するオプションを決定します。
 
-### Operator Versions
+### Private Operator Upgrade Policy
+
+<UpgradePolicy />
+
+### Operator Version
 
 最新の ZIP ファイルは、次の表の GCP ダウンロード列にリンクされています。
 
@@ -175,7 +180,7 @@ Terraform がインストールされていない場合は、[terraform.io](http
 
 #### Download the Template Files
 
-[Operator Versions](#operator-versions) の GCP ダウンロード列にある ZIP ファイルをダウンロードします。最新バージョンを選択してください。ファイルを便利な場所に解凍します。次の表に示すファイルが生成されます。
+[Operator Version](#operator-version) の GCP ダウンロード列にある ZIP ファイルをダウンロードします。最新バージョンを選択してください。ファイルを便利な場所に解凍します。次の表に示すファイルが生成されます。
 
 | File | Details |
 | :--- | :--- |
@@ -401,7 +406,7 @@ UID2 Operator には、Operator Key が必要です。UID2 アカウントの設
 | `{ZONE}` | VM インスタンスがデプロイされる Google Cloud ゾーン。 |
 | `{IMAGE_FAMILY}` | `confidential-space` はインテグレーションと本番で使用し、`confidential-space-debug` はインテグレーションでのみデバッグ用に使用します。`confidential-space-debug` は本番では動作しないことに注意してください。 |
 | `{SERVICE_ACCOUNT}` | アカウント作成時に作成したサービスアカウントのメールアドレス: `{SERVICE_ACCOUNT_NAME}@{PROJECT_ID}.iam.gserviceaccount.com`.<br/>詳細は [Set Up Service Account Rules and Permissions](#set-up-service-account-rules-and-permissions) (Step 4) を参照してください。|
-| `{OPERATOR_IMAGE}` | コンフィギュレーションで使用するUID2 Private Operator for GCPのDockerイメージURL。<br/>これは、GCPダウンロードファイルの`terraform.tfvars`ファイルにあります。([Operator Versions](#operator-versions) を参照) |
+| `{OPERATOR_IMAGE}` | コンフィギュレーションで使用するUID2 Private Operator for GCPのDockerイメージURL。<br/>これは、GCPダウンロードファイルの`terraform.tfvars`ファイルにあります。([Operator Version](#operator-version) を参照) |
 | `{OPERATOR_KEY_SECRET_FULL_NAME}` | Operator Key secret に指定したフルネーム ([Create Secret for the Operator Key in Secret Manager](#create-secret-for-the-operator-key-in-secret-manager) を参照)。パスを含め `projects/<project_id>/secrets/<secret_id>/versions/<version>` の形式でしています。たとえば: `projects/111111111111/secrets/uid2-operator-operator-key-secret-integ/versions/1` |
 
 ##### Sample Deployment Script&#8212;Integ
diff --git a/i18n/ja/docusaurus-plugin-content-docs/current/snippets/_private-operator-upgrade-policy.mdx b/i18n/ja/docusaurus-plugin-content-docs/current/snippets/_private-operator-upgrade-policy.mdx
@@ -0,0 +1,7 @@
+<!-- Used by: All Private Operator guides plus Private Operator overview (guides/integration-options-private-operator.md) -->
+
+To maintain security and operational integrity, outdated operator versions will be disabled after 12 months, which may cause affected deployments to shut down or fail to start. Upgrading ensures the use of the latest security and feature enhancements. We recommend upgrading proactively to avoid disruptions.
+
+:::note
+For critical security or operational issues, or where contract terms apply, we reserve the right to enforce tighter upgrade timelines for private operators.
+:::
