Merge pull request #58760 from mletalie/OSDOCS-5467

[OSDOCS-5467]Expand all RACI tables to include relevant AWS infrastructure

Author: stevsmit

_topic_maps/_topic_map_rosa.yml

@@ -59,7 +59,7 @@ Topics:
   Topics:
   - Name: About availability for ROSA
     File: rosa-policy-understand-availability
-  - Name: Responsibility assignment matrix
+  - Name: Overview of responsibilities for ROSA
     File: rosa-policy-responsibility-matrix
   - Name: ROSA service definition
     File: rosa-service-definition

modules/rosa-policy-customer-responsibility.adoc

@@ -7,30 +7,50 @@
 = Customer responsibilities for data and applications
 
 
-The customer is responsible for the applications, workloads, and data that they deploy to {product-title}. However, Red Hat provides various tools to help the customer manage data and applications on the platform.
+The customer is responsible for the applications, workloads, and data that they deploy to Red Hat
+OpenShift Service on AWS. However, Red Hat and AWS provide various tools to help the customer
+manage data and applications on the platform.
 
 [cols="2a,3a,3a",options="header"]
 |===
 
 |Resource
-|Red Hat responsibilities
+|Red Hat and AWS
 |Customer responsibilities
 
 |Customer data
-|- Maintain platform-level standards for data encryption.
+|**Red Hat**
+
+- Maintain platform-level standards for data encryption as defined by industry security and
+compliance standards.
 - Provide OpenShift components to help manage application data, such as secrets.
-- Enable integration with third-party data services, AWS RDS, to store and manage data outside of the cluster and cloud provider.
-|Maintain responsibility for all customer data stored on the platform and how customer applications consume and expose this data.
+- Enable integration with data services such as
+Amazon RDS to store and manage data outside of the cluster and/or AWS.
+
+**AWS**
+
+- Provide Amazon RDS to allow customers to store and manage data outside of the cluster and/or AWS.
+|- Maintain responsibility for all customer data stored on the platform and how customer applications consume and expose this data.
 
 |Customer applications
-|- Provision clusters with OpenShift components installed so that customers can access the OpenShift and Kubernetes APIs to deploy and manage containerized applications.
+|**Red Hat**
+
+- Provision clusters with OpenShift components installed so that customers can access the OpenShift and Kubernetes APIs to deploy and manage containerized applications.
 - Create clusters with image pull secrets so that customer deployments can pull images from the Red Hat Container Catalog registry.
 - Provide access to OpenShift APIs that a customer can use to set up Operators to add community, third-party, and Red Hat services to the cluster.
 - Provide storage classes and plugins to support persistent volumes for use with customer applications.
 - Provide a container image registry so customers can securely store application container images on the cluster to deploy and manage applications.
+
+**AWS**
+
+- Provide Amazon EBS to support persistent volumes for use with customer applications.
+
+- Provide Amazon S3 to support Red Hat provisioning of the container image registry.
+
 |- Maintain responsibility for customer and third-party applications, data, and their complete lifecycle.
 - If a customer adds Red Hat, community, third-party, their own, or other services to the cluster by using Operators or external images, the customer is responsible for these services and for working with the appropriate provider, including Red Hat, to troubleshoot any issues.
 - Use the provided tools and features to configure and deploy; keep up to date; set up resource requests and limits; size the cluster to have enough resources to run apps; set up permissions; integrate with other services; manage any image streams or templates that the customer deploys; externally serve; save, back up, and restore data; and otherwise manage their highly available and resilient workloads.
-- Maintain responsibility for monitoring the applications run on {product-title}, including installing and operating software to gather metrics and create alerts.
+- Maintain responsibility for monitoring the applications run on {product-title}, including
+installing and operating software to gather metrics, create alerts, and protect secrets in the application.
 
 |===

modules/rosa-policy-responsibilities.adoc

@@ -5,7 +5,7 @@
 
 :_content-type: CONCEPT
 [id="rosa-policy-responsibilities_{context}"]
-= Overview of responsibilities for {product-title}
+= Shared responsibilities for {product-title}
 
 
 While Red Hat and Amazon Web Services (AWS) manage the {product-title} services, the customer shares certain responsibilities. The {product-title} services are accessed remotely, hosted on public cloud resources, created in customer-owned AWS accounts, and have underlying platform and data security that is owned by Red Hat.
@@ -39,18 +39,19 @@ If the `cluster-admin` role is added to a user, see the responsibilities and exc
 
 |Cluster networking |Red Hat |Red Hat and Customer |Red Hat and Customer |Red Hat |Red Hat
 
-|Virtual networking |Red Hat and Customer |Red Hat and Customer |Red Hat and Customer |Red Hat and Customer |Red Hat and Customer
+|Virtual networking management |Red Hat and Customer |Red Hat and Customer |Red Hat and Customer |Red Hat and Customer |Red Hat and Customer
 
-|Control plane and infrastructure nodes |Red Hat |Red Hat |Red Hat |Red Hat |Red Hat
-
-|Worker nodes |Red Hat |Red Hat |Red Hat |Red Hat |Red Hat
+|Virtual compute management (control plane, infrastructure and worker nodes) |Red Hat |Red Hat |Red Hat |Red Hat |Red Hat
 
 |Cluster version |Red Hat |Red Hat and Customer |Red Hat |Red Hat |Red Hat
 
 |Capacity management |Red Hat |Red Hat and Customer |Red Hat |Red Hat |Red Hat
 
-|Virtual storage |Red Hat and AWS |Red Hat and AWS |Red Hat and AWS |Red Hat and AWS |Red Hat and AWS
+|Virtual storage management |Red Hat |Red Hat |Red Hat |Red Hat |Red Hat
+
+|AWS software (public AWS services) |AWS |AWS
+|AWS |AWS |AWS
 
-|Physical infrastructure and security |AWS |AWS |AWS |AWS |AWS
+|Hardware/AWS global infrastructure |AWS |AWS |AWS |AWS |AWS
 
 |===