// Module included in the following assemblies:
//
// * osd_architecture/osd_policy/policy-responsibility-matrix.adoc

:_mod-docs-content-type: REFERENCE
[id="policy-customer-responsibility_{context}"]
= Customer responsibilities for data and applications

[role="_abstract"]
The customer is responsible for the applications, workloads, and data that they deploy to {product-title}. However, Red Hat provides various tools to help the customer manage data and applications on the platform.

[cols="2a,3a,3a",options="header"]
|===

|Resource
|Red Hat responsibilities
|Customer responsibilities

|Customer data
|* Maintain platform-level standards for data encryption.
* Provide OpenShift components to help manage application data, such as secrets.
* Enable integration with third-party data services (such as AWS RDS or {gcp-full} SQL) to store and manage data outside of the cluster and/or cloud provider.
|Maintain responsibility for all customer data stored on the platform and how customer applications consume and expose this data.

|Customer applications
|* Provision clusters with OpenShift components installed so that customers can access the OpenShift and Kubernetes APIs to deploy and manage containerized applications.
* Create clusters with image pull secrets so that customer deployments can pull images from the Red Hat Container Catalog registry.
* Provide access to OpenShift APIs that a customer can use to set up Operators to add community, third-party, and Red Hat services to the cluster.
* Provide storage classes and plugins to support persistent volumes for use with customer applications.
* Provide a container image registry so customers can securely store application container images on the cluster to deploy and manage applications.
|* Maintain responsibility for customer and third-party applications, data, and their complete lifecycle.
* If a customer adds Red Hat, community, third-party, their own, or other services to the cluster by using Operators or external images, the customer is responsible for these services and for working with the appropriate provider (including Red Hat) to troubleshoot any issues.
* Use the provided tools and features to configure and deploy; keep up-to-date; set up resource requests and limits; size the cluster to have enough resources to run apps; set up permissions; integrate with other services; manage any image streams or templates that the customer deploys; externally serve; save, back up, and restore data; and otherwise manage their highly available and resilient workloads.
* Maintain responsibility for monitoring the applications run on OpenShift Dedicated; including installing and operating software to gather metrics and create alerts.

|===

// TODO: Should "Red Hat Container Catalog" be "Red Hat Ecosystem Catalog" now?
