Service dependency map for IBM Cloud Kubernetes Service and Red Hat OpenShift on IBM Cloud

What is the expected impact to the functions described?

Each severity tab in the table indicates the impact that your provisioned service might encounter if the dependency were to go offline. This means that the dependency high availability and disaster recovery influences the severity of the impact and therefore is used for general guidance to help you understand potential issues that might arise if the dependency was impacted by an incident.

Services that are regional are not impacted by a severe outage of a single zone because of the failover that is built in to default to another zone. For these occurrences, there might be a slight performance impact, if any, while the system fails over to the other location. This also applies to global services where the impact is lowered even more as it can fail over to other regions if necessary. This reduces the frequency at which these items might have the impact that is shown.

What services does my service depend on?

The Dependencies column lists the services. These are the major service to service dependencies including major internal dependencies that might not be visible externally.

What function does the dependency impact?

Functions include access management, availability, change management, configuration management, customer responsibility, disaster recovery, instance control, operations, security compliance, or none. If the dependency goes offline, these functions might be impacted. Definitions for each available value are as follows:

Access management

Authentication, authorization, and governance of the customer users access to the service and service instances.

Availability

Availability of the service and service instances.

Change management

Deployment, upgrade, patch, and so on, of the service and service instances.

Configuration management

Deployment, upgrade, patch, and so on, of the service and service instances.

Customer responsibility

Functions provided by customers to support specific service and service instances function. For example, IBM Key Protect for IBM Cloud instances provided by customer to support service BYOK encryption.

Disaster recovery

Backup, recovery, restart of the service and service instances in the case of a disruption.

Instance control

Creation, deletion, start, stop actions on the lifecycle of the service instances.

Operations

Monitoring, troubleshooting, and so on, of the service and service instances.

Security compliance

Vulnerability management and other security and compliance management of the service and service instances.

None

No function impacted.

What does customer provided mean for dependencies?

The Customer provided column reports if there is any dependency that has been provided by the customer to enable specific functionality. One such example is to properly configure and set up using BYOK into a service, the customer would provision a service like IBM Key Protect for IBM Cloud. For more information about how to enable the features and which services you need to provision, see the documentation for the service.

Where do dependency services need to be deployed regarding my service?

In the Location of dependency column, you can view if the dependency is located in the same region or deployed to a specific data center. You can use this data with the data in the Control or data plane column for a quick reference to identify if your data leaves the region or not in a standard setup.

To find where your service can be deployed, see Service and infrastructure availability by location.

The table shows a standard cloud deployment. If a special deployment is used like FedRAMP or other region-bound deployment models, the data might differ from the details available in the table. Refer to the specific deployment that you are using for that information.

Where are the separate control plane and data plane located, if applicable?

Sometimes, the dependency might have a separate control plane and data plane. In these cases, there are separate lines that show the location in relation to the deployed customer instance of the service where these will be provisioned. The lines might have different impacts and different functions. See the Control or data plane column to understand what possible impact this type of outage might have.

Same region means that the dependent services are in the same region as the provisioned instance. Other values might show data center or region names if the service must be used from a specific region, a specific zone, or set of zones. If a service is tied to a specific region or site, and the region goes offline, the service might go offline as well. It is recommended that you go through the high availability and disaster recovery documentation of the dependency to determine if there are any steps that you should take to mitigate these types of risks.