The shared responsibility model

This document is a not an exhaustive summary and responsibility might change in compliance with the defined service SLA. Please take a look at the STACKIT service certificate for Edge Cloud to get a better understanding of the current product SLA.

STACKIT Edge Cloud follows the shared responsibility model for cloud services. The following table and diagram will explain the responsibility of the parties involved:

The following table summarizes the responsibilities of STACKIT and the customer when using STACKIT Edge Cloud:

Expand

Component	STACKIT responsibilities	Customer responsibilities
STACKIT Edge Cloud	Provide and maintain all the components required to use STACKIT Edge Cloud. Provide access to customer facing APIs. Fix security vulnerabilities in a timely manner.	Review and install security updates when they are made available. Restrict and protect access to the system. Maintain a good credential hygiene to protect the service from unauthorized access.
STEC instance CRDs	Provide and maintain all the components required to use the exposed STACKIT Edge Cloud CRDs.	Use the provided CRDs to manage the underlying external components such as EdgeHosts, EdgeClusters and EdgeImages. Take responsibility for correct configuration data being provided to the CRDs and the actions triggered by those configuration changes. Maintain secure settings and change management.
Edge clusters	Provide and maintain a operator that interacts with the desired state defined in the EdgeCluster resource by the Customer.	Define the desired state of the EdgeCluster resource. Monitor the EdgeCluster resource for events. Take responsibility for setting changes.
Talos Linux	Provide download access to the latest supported Talos Linux and associated Kubernetes images. Provide best effort support.	Review and install security updates when they are made available. Restrict and protect access to the system. Maintain secure settings and change management. Monitor the system for security notifications, events, alerts and abnormal behavior.
Hardware	-	Restrict and protect access to the system.
Workloads	-	Review and install security updates when they are made available. Do not alter and protect STACKIT provided applications against modification.
EdgeHostLet	Provide and maintain the EdgeHostLet extension.	Do not alter and protect the EdgeHostLet against modification.