Skip to content

Commit b58094d

Browse files
Y0CossY0Coss
committed
Orchestration proofreading
1 parent 1a0f05d commit b58094d

File tree

2 files changed

+57
-71
lines changed

2 files changed

+57
-71
lines changed

‎pages/account_and_service_management/reversibility/12-reversibility-orchestration/guide.en-gb.md

Lines changed: 26 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -1,77 +1,70 @@
11
---
22
title: Orchestration product reversibility policy
3-
updated: 2025-06-10
3+
updated: 2025-06-16
44
---
55

66
## Objective
77

8-
This document outlines the reversibility policy for the product Managed Orchestration covering OVHcloud offers: Kubernetes and Rancher.
8+
This document outlines the reversibility policy for the Managed Orchestration product, covering the following OVHcloud offers: Managed Kubernetes Service (MKS) and Managed Rancher Service (MRS).
99

1010
This policy aims to implement the general reversibility principles and our compliance with the SWIPO IAAS Code of Conduct for cloud providers.
1111

1212
## Feature List
1313

14-
The characteristics of the  product are divided into three categories:
14+
The characteristics of the Managed Orchestration product are divided into three categories:
1515

1616
- **Main features** for which we guarantee migration capacity.
1717
- **OVHcloud implementations** that require adaptation to a new migration environment.
1818
- **Specific features** that cannot be guaranteed for migration as they are related to the OVHcloud environment or involve custom developments.
1919

20-
21-
22-
## Main features
20+
### Main features
2321

2422
| Functionality| Description | Formats | Migration model | Documentation available |
2523
| --- | --- | --- | --- | --- |
2624
| **Orchestration via Kubernetes** | Cluster management via Kubernetes API (kubectl, Helm, CI/CD, etc.), CNCF compliant| YAML, JSON, OCI | **Inbound**: Deploy manifests, Helm charts, OCI images via the standard Kubernetes API.<br>**Outbound**: Export manifests, Helm charts, images via the standard API, reusable on any compatible Kubernetes cluster. | [Creating a cluster](/pages/public_cloud/containers_orchestration/managed_kubernetes/creating-a-cluster)|
27-
| **Orchestration via Rancher** | Container orchestration simplifies the deployment, management, and scaling of containerised applications. | YAML, JSON, OCI | **Inbound** : Import manifests, Helm charts, OCI images or cluster via API and user interface.<br>**Outbound** : Export manifests, Helm charts, images via API, reusable on any compatible Kubernetes cluster. | [Getting Started with Managed Rancher Service](/pages/public_cloud/containers_orchestration/managed_rancher_service/getting-started)
28-
| **Export/Import manifests** | Resource deployment, export and migration via standard Kubernetes YAML/JSON files | YAML, JSON | **Inbound** : Import existing manifests directly.<br>**Outbound** : Export manifests via kubectl get -o yaml/json, which can be used on any compatible Kubernetes cluster. |[Deploying an application](/pages/public_cloud/containers_orchestration/managed_kubernetes/deploying-an-application)|
29-
| **IAM** | Rancher management of identity and access to cluster resources via an external identity provider. | Active Directory, LDAP, OpenLDAP, Azure AD... | **Inbound**: Import or create roles and access policies via API or user interface..<br>**Outbound**: Export configurations via API or user interface.| [Configuring authentication](https://ranchermanager.docs.rancher.com/how-to/new-user-guides/permissions-authentication-and-global-configuration/authentication-config)|
25+
| **Orchestration via Rancher** | Container orchestration simplifies the deployment, management, and scaling of containerised applications. | YAML, JSON, OCI | **Inbound**: Import manifests, Helm charts, OCI images or cluster via API and user interface.<br>**Outbound**: Export manifests, Helm charts, images via API, reusable on any compatible Kubernetes cluster. | [Getting Started with Managed Rancher Service](/pages/public_cloud/containers_orchestration/managed_rancher_service/getting-started) |
26+
| **Export/Import manifests** | Resource deployment, export and migration via standard Kubernetes YAML/JSON files | YAML, JSON | **Inbound**: Import existing manifests directly.<br>**Outbound**: Export manifests via `kubectl get -o yaml/json`, which can be used on any compatible Kubernetes cluster. |[Deploying an application](/pages/public_cloud/containers_orchestration/managed_kubernetes/deploying-an-application)|
27+
| **IAM** | Rancher management of identity and access to cluster resources via an external identity provider. | Active Directory, LDAP, OpenLDAP, Azure AD... | **Inbound**: Import or create roles and access policies via API or user interface..<br>**Outbound**: Export configurations via API or user interface. | [Configuring authentication](https://ranchermanager.docs.rancher.com/how-to/new-user-guides/permissions-authentication-and-global-configuration/authentication-config)|
28+
29+
### OVHcloud implementation
3030

31-
## OVHcloud implementation
3231
| Functionality| Description | Formats | Migration model | Documentation available |
3332
| --- | --- | --- | --- | --- |
34-
| **Link between Identity Provider and cluster** | Connection between identity provider and cluster | JSON | **Incoming** : Configuration adaptation in OVH format before import via CLI or IHM.<br>**Outgoing** : Export configurations in OVH format, adaptation to the target environment required. | [Configuring the OIDC provider on an OVHcloud Managed Kubernetes cluster](/pages/public_cloud/containers_orchestration/managed_kubernetes/configuring-oidc-provider-config) |
35-
| **Control Plane Configuration**| Ability to change certain settings to customize the cluster. | N/A | **Incoming** : : Configuration of certain Kubernetes Control Plane settings via an OVH-specific API.<br>**Outgoing** : Not directly exportable, rewriting settings in the target environment.| [Creating a cluster]( /pages/public_cloud/containers_orchestration/managed_kubernetes/creating-a-cluster) |
36-
| **Private network and vRack** | The vRack, or virtual rack, is a private VLAN technology that enables the connection between OVHcloud services available on the Managed Kubernetes service dataplane | N/A | **Inbound**: Managed Kubernetes services are included by default in vRack.<br>**Outbound**: Take note of the network architecture and reproduce it with VLANs.| [ Using vRack Private Network ](/pages/public_cloud/containers_orchestration/managed_kubernetes/using-vrack) |
37-
| **Logging** | Action tracking in kubernetes.Rancher logs are not accessible to the customer.| N/A | **Incoming**: N/A<br>**Outgoing**: Log forwarding can be configured with the need to integrate with the OVHcloud Log Data Platform service. | [Managed Kubernetes Service Audit Logs Forwarding](/pages/public_cloud/containers_orchestration/managed_kubernetes/forwarding-audit-logs-to-logs-data-platform) |
38-
| **Add-ons and specific operators** | Some operators/add-ons deployed via the OVHcloud Marketplace or specific to OVHcloud | YAML, JSON, Helm | **Inbound** : Installation possible if compatible with.<br>**Outbound**: Adaptation or replacement by equivalents on the target (limitation to Standard Rancher for Rancher). |
39-
| **Node pool** | Ability to create a node pool.| N/A | **Inbound**:Configure the node pool via the OVH interface.<br>**Outbound**: Reuse the node pool format in an equivalent environment |[Managing nodes and node pools](/pages/public_cloud/containers_orchestration/managed_kubernetes/managing-nodes) |
33+
| **Link between Identity Provider and cluster** | Connection between identity provider and cluster | JSON | **Incoming**: Configuration adaptation in OVH format before import via CLI or IHM.<br>**Outgoing**: Export configurations in OVH format, adaptation to the target environment required. | [Configuring the OIDC provider on an OVHcloud Managed Kubernetes cluster](/pages/public_cloud/containers_orchestration/managed_kubernetes/configuring-oidc-provider-config) |
34+
| **Control Plane Configuration**| Ability to change certain settings to customize the cluster. | N/A | **Incoming**: Configuration of certain Kubernetes Control Plane settings via an OVHcloud-specific API.<br>**Outgoing**: Not directly exportable, rewriting settings in the target environment.| [Creating a cluster](/pages/public_cloud/containers_orchestration/managed_kubernetes/creating-a-cluster) |
35+
| **Private network and vRack** | The vRack, or virtual rack, is a private VLAN technology that enables the connection between OVHcloud services available on the Managed Kubernetes service dataplane | N/A | **Inbound**: Managed Kubernetes services are included by default in vRack.<br>**Outbound**: Take note of the network architecture and reproduce it with VLANs.| [Using vRack Private Network ](/pages/public_cloud/containers_orchestration/managed_kubernetes/using-vrack) |
36+
| **Logging** | Action tracking in Kubernetes. Rancher logs are not accessible to the customer.| N/A | **Incoming**: N/A<br>**Outgoing**: Logs forwarding can be configured with the need to integrate with the OVHcloud Logs Data Platform service. | [Managed Kubernetes Service Audit Logs Forwarding](/pages/public_cloud/containers_orchestration/managed_kubernetes/forwarding-audit-logs-to-logs-data-platform) |
37+
| **Add-ons and specific operators** | Some operators/add-ons deployed via the OVHcloud Marketplace or specific to OVHcloud | YAML, JSON, Helm | **Inbound**: Installation possible if compatible.<br>**Outbound**: Adaptation or replacement by equivalents on the target (limitation to Standard Rancher for Rancher). |
38+
| **Node pool** | Ability to create a node pool.| N/A | **Inbound**: Configure the node pool via the OVHcloud interface.<br>**Outbound**: Reuse the node pool format in an equivalent environment |[Managing nodes and node pools](/pages/public_cloud/containers_orchestration/managed_kubernetes/managing-nodes) |
4039

40+
### Specific features
4141

42-
## Specific features
4342
| Functionality | Description | Formats | Migration model | Documentation available |
4443
| --- | --- | --- | --- | --- |
45-
| **OVHcloud Manager/API**| Managed via OVHcloud Manager/API| N/A | **Inbound**: N/A<br>**Outbound**: Scripts and APIs to be rewritten for the target environment, manual management required. | [OVHcloud API Specification ](https://eu.api.ovh.com/console/?section=%2FallDom&branch=v1)|
46-
| **Rancher OVHcloud Edition** | Rancher Limited Use Offer in OVH. | N/A | **Inbound** :: Feature configuration if available.<br>**Outbound** : Scripts/API to rewrite for the target, manual management required.| [Managed Rancher Service](https://www.ovhcloud.com/en-gb/public-cloud/managed-rancher-service/) |
44+
| **OVHcloud Control Panel/API**| Managed via OVHcloud Control Panel/API| N/A | **Inbound**: N/A<br>**Outbound**: Scripts and APIs to be rewritten for the target environment, manual management required. | [OVHcloud API Specification](https://api.ovh.com/console/?section=%2FallDom&branch=v1)|
45+
| **Rancher OVHcloud Edition** | Rancher Limited Use Offer in OVHcloud. | N/A | **Inbound**:: Feature configuration if available.<br>**Outbound**: Scripts/API to rewrite for the target, manual management required.| [Managed Rancher Service](/links/public-cloud/rancher) |
4746
| **Infrastructure as Code** | Automated deployment via OVHcloud-specific Terraform modules for managed services, or via Terraform Kubernetes or Rancher modules for open-source services. | N/A | **Inbound:** Scripts to be adapted for other providers <br> **Outbound:** Terraform configurations need to be rewritten. | [Terraform](https://registry.terraform.io/providers/ovh/ovh/latest/docs) |
48-
| **Anti-DDoS** | Anti-DDoS is a set of equipment and means put in place to absorb denial of service attacks. It includes traffic analysis, “vacuuming” to a specialized network, and mitigation, powered by VAC technology developed by OVHcloud. | N/A | **Incoming:** The anti-DDoS system is a component of our infrastructure, enabled by default. No action is required. <br> **Outgoing:** Order and configure an anti-DDoS solution with the new provider.| [Anti-DDoS Protection](https://www.ovh.com/en-gb/anti-ddos/)<br>[Anti-DDoS Technology](https://www.ovh.com/en-gb/anti-ddos/anti-ddos-technology.xml) |
49-
50-
47+
| **Anti-DDoS** | Anti-DDoS is a set of equipment and means put in place to absorb denial of service attacks. It includes traffic analysis, “vacuuming” to a specialized network, and mitigation, powered by VAC technology developed by OVHcloud. | N/A | **Incoming:** The anti-DDoS system is a component of our infrastructure, enabled by default. No action is required. <br> **Outgoing:** Order and configure an anti-DDoS solution with the new provider.| [Anti-DDoS infrastructure](/links/security/ddos) |
5148

5249
## List of architectures
5350

54-
OVHcloud Managed Orchestration is based on managed, multi-node Kubernetes clusters with high availability, auto-scaling, centralized management, and private network integration (vRack). Integration of the main monitoring, logging and CI/CD tools. Architectures support multi-cloud migration and hybrid deployment.
55-
56-
The managed orchestration service runs in a single region from among several regions, available from OVH. You can manage multiple clusters in multiple regions (provided by OVH or other providers) via the Rancher service running in a single region.
51+
OVHcloud Managed Orchestration is based on managed, multi-node Kubernetes clusters with high availability, auto-scaling, centralized management, and private network integration (vRack). The main monitoring, logging and CI/CD tools are integrated. Architectures support multi-cloud migration and hybrid deployment.
5752

53+
The managed orchestration service runs in a single region from among several regions, available from OVHcloud. You can manage multiple clusters in multiple regions (provided by OVHcloud or other providers) via the Managed Rancher Service running in a single region.
5854

5955
## Partner Services
6056

61-
OVHcloud partners are listed under the keyword **“Migrate to the cloud”** in the Dedicated Partner Directory.
62-
63-
OVHcloud also offers a dedicated service: [**OVHcloud Professional Services**](https://www.ovhcloud.com/en-gb/professional-services/).
64-
57+
OVHcloud partners are listed under the keyword **“Migrate to the cloud”** in the [Dedicated Partner directory](/links/partner).
6558

59+
OVHcloud also offers a dedicated service: [**OVHcloud Professional Services**](/links/professional-services).
6660

6761
## Cost and fees
6862

69-
Billing on a pay-per-use basi. it stops when the customer no longer consumes resources. No specific cancelation fees apply: deleting the service will stop the billing immediately. Any associated OVHcloud credits cannot be transferred.
70-
71-
After the service has been canceled, OVH frees up its resources, making it impossible to retrieve the data. It is the customer’s responsibility to export their configurations, manifests and images prior to termination, due to the release of resources.
63+
Billing on a pay-per-use basis. It stops when the customer no longer consumes resources. No specific cancellation fees apply: deleting the service will stop the billing immediately. Any associated OVHcloud credits cannot be transferred.
7264

73-
If Rancher is used, the billing will include a minimum amount, even if it does not orchestrate any clusters.
65+
After the service has been cancelled, OVHcloud frees up its resources, making it impossible to retrieve the data. It is the customer’s responsibility to export their configurations, manifests and images prior to termination, due to the release of resources.
7466

67+
If Managed Rancher Service is used, the billing will include a minimum amount, even if it does not orchestrate any clusters.
7568

7669
## Data retention after termination of contract
7770

0 commit comments

Comments
 (0)