diff --git a/website/redirects.txt b/website/redirects.txt index e8c9f18ff..cc1eb037d 100644 --- a/website/redirects.txt +++ b/website/redirects.txt @@ -217,3 +217,22 @@ /guides/operations/upgrade/ /guides/upgrade/index.html /guides/operations/upgrade/index.html /guides/upgrade/index.html /guides/operations/upgrade/upgrade-specific.html /guides/upgrade/upgrade-specific.html + +# Enterprise + +# Reorganized Enterprise into single pager +/docs/enterprise/namespaces /docs/enterprise/index.html#namespaces +/docs/enterprise/namespaces/ /docs/enterprise/index.html#namespaces +/docs/enterprise/namespaces/index.html /docs/enterprise/index.html#namespaces +/docs/enterprise/quotas /docs/enterprise/index.html#resource-quotas +/docs/enterprise/quotas/ /docs/enterprise/index.html#resource-quotas +/docs/enterprise/quotas/index.html /docs/enterprise/index.html#resource-quotas +/docs/enterprise/preemption /docs/enterprise/index.html#preemption +/docs/enterprise/preemption/ /docs/enterprise/index.html#preemption +/docs/enterprise/preemption/index.html /docs/enterprise/index.html#preemption +/docs/enterprise/sentinel /docs/enterprise/index.html#sentinel-policies +/docs/enterprise/sentinel/ /docs/enterprise/index.html#sentinel-policies +/docs/enterprise/sentinel/index.html /docs/enterprise/index.html#sentinel-policies +/docs/enterprise/autopilot /docs/enterprise/index.html#nomad-enterprise-platform +/docs/enterprise/autopilot/ /docs/enterprise/index.html#nomad-enterprise-platform +/docs/enterprise/autopilot/index.html /docs/enterprise/index.html#nomad-enterprise-platform diff --git a/website/source/docs/enterprise/autopilot/index.html.md b/website/source/docs/enterprise/autopilot/index.html.md deleted file mode 100644 index a4a061538..000000000 --- a/website/source/docs/enterprise/autopilot/index.html.md +++ /dev/null @@ -1,45 +0,0 @@ ---- -layout: "docs" -page_title: "Nomad Enterprise Advanced Autopilot" -sidebar_current: "docs-enterprise-autopilot" -description: |- - Nomad Enterprise supports Advanced Autopilot capabilities which enable fully - automated server upgrades, higher throughput for reads and scheduling, and hot - server failover on a per availability zone basis. ---- - -# Nomad Enterprise Advanced Autopilot - -[Nomad Enterprise](https://www.hashicorp.com/go/nomad-enterprise) supports Advanced Autopilot capabilities which enable fully -automated server upgrades, higher throughput for reads and scheduling, and hot -server failover on a per availability zone basis. See the sections below for -additional details on each of these capabilities. - -* **Automated Upgrades:** Advanced Autopilot enables an upgrade pattern that -allows operators to deploy a complete cluster of new servers and then simply wait -for the upgrade to complete. As the new servers join the cluster, server -introduction logic checks the version of each Nomad server. If the version is -higher than the version on the current set of voters, it will avoid promoting -the new servers to voters until the number of new servers matches the number of -existing servers at the previous version. Once the numbers match, Autopilot will -begin to promote new servers and demote old ones. - -* **Enhanced Read Scalability:** With Advanced Autopilot, servers can be -explicitly marked as non-voters. Non-voters will receive the replication stream -but will not take part in quorum (required by the leader before log entries can -be committed). Adding explicit non-voters will scale reads and scheduling without -impacting write latency. - -* **Redundancy Zones:** Advanced Autopilot redundancy zones make it possible to -have more servers than availability zones. For example, in an environment with -three availability zones it's now possible to run one voter and one non-voter in -each availability zone, for a total of six servers. If an availability zone is -completely lost, only one voter will be lost, so the cluster remains available. -If a voter is lost in an availability zone, Autopilot will promote the non-voter -to voter automatically, putting the hot standby server into service quickly. - -See the [Nomad Autopilot Guide](/guides/operations/autopilot.html) -for a comprehensive overview of Nomad's open source and enterprise Autopilot features. - -Click [here](https://www.hashicorp.com/go/nomad-enterprise) to set up a demo or -request a trial of Nomad Enterprise. diff --git a/website/source/docs/enterprise/index.html.md b/website/source/docs/enterprise/index.html.md index d58bed55c..3c7cb1cb8 100644 --- a/website/source/docs/enterprise/index.html.md +++ b/website/source/docs/enterprise/index.html.md @@ -9,24 +9,57 @@ description: |- # Nomad Enterprise -[Nomad Enterprise](https://www.hashicorp.com/go/nomad-enterprise) adds collaboration, -operational, and governance capabilities to Nomad. Namespaces allow multiple -teams to safely use a shared multi-region deployment. With Resource Quotas, -operators can limit resource consumption across teams or projects. Sentinel -policies enable enforcement of arbitrary fine-grained policies on job submission. -Preemption capabilities enable the scheduler to temporarily evict lower priority -allocations for service and batch jobs so that higher priority allocations can be placed. -Advanced Autopilot capabilities enable automated server upgrades, enhanced scalability -for reads and scheduling, and hot server failover on a per availability zone basis. See the -links below for a detailed overview of each feature. +Nomad Enterprise adds collaboration, operational, and governance capabilities to Nomad. -- [Namespaces](/docs/enterprise/namespaces/index.html) -- [Resource Quotas](/docs/enterprise/quotas/index.html) -- [Sentinel Policies](/docs/enterprise/sentinel/index.html) -- [Preemption](/docs/enterprise/preemption/index.html) -- [Advanced Autopilot](/docs/enterprise/autopilot/index.html) +Nomad Enterprise is available as a base Platform package with an optional Governance & Policy module. -Click [here](https://www.hashicorp.com/go/nomad-enterprise) to set up a demo or request a trial +Please navigate the sub-sections for more information about each package and its features in detail. + +## Nomad Enterprise Platform +Nomad Enterprise Platform enables users to deploy Nomad with operational ease and enhanced performance through Advanced Autopilot features such as Automated Upgrades, Enhanced Read Scalability, Redundancy Zones and more. + +### Automated Upgrades +Allows operators to deploy a complete cluster of new servers and then simply wait for the upgrade to complete. As the new servers join the cluster, server logic checks the version of each Nomad server node. If the version is higher than the version on the current set of voters, it will avoid promoting the new servers to voters until the number of new servers matches the number of existing servers at the previous version. Once the numbers match, Nomad will begin to promote new servers and demote old ones. + +See the [Autopilot Upgrade](https://www.nomadproject.io/guides/operations/autopilot.html#upgrade-migrations) subsection for a thorough overview. + +### Enhanced Read Scalability +Explicitly mark server nodes as non-voters. Non-voters will receive the replication stream but will not take part in quorum (required by the leader before log entries can be committed). Adding explicit non-voters will scale reads and scheduling without impacting write latency. + +See the [Autopilot Read Scalability](https://www.nomadproject.io/guides/operations/autopilot.html#server-read-and-scheduling-scaling) subsection for a thorough overview. + +### Redundancy Zones +Deploy more server nodes than availability zones. For example, in an environment with three availability zones one can run one voter and one non-voter in each availability zone, for a total of six servers. If an availability zone is completely lost, only one voter will be lost, so the cluster remains available. If a voter is lost in an availability zone, Nomad will promote the non-voter to voter automatically, putting the hot standby server into service quickly. + +See the [Autopilot Redundancy Zones](https://www.nomadproject.io/guides/operations/autopilot.html#redundancy-zones) subsection for a thorough overview. + +## Governance & Policy +Governance & Policy is an add-on module that enables users to securely operate Nomad at scale across multiple teams through features such as Namespaces, Resource Quotas, Preemption, Sentinel Policies, and more. + +### Namespaces +Enable multiple teams to safely use a shared multi-region deployment and reduce cluster fleet size. In Nomad Enterprise, a shared cluster can be partitioned into namespaces which allows jobs and their associated objects to be isolated from each other and other users of the cluster. + +Namespaces enhance the usability of a shared cluster by isolating teams from the jobs of others, provide fine grain access control to jobs when coupled with ACLs, and can prevent bad actors from negatively impacting the whole cluster. + +See the [Namespaces Guide](https://www.nomadproject.io/docs/enterprise/namespaces/index.html) for a thorough overview. + +### Resource Quotas +Limit resource consumption across teams or projects to reduce waste and align budgets. In Nomad Enterprise, operators can define quota specifications and apply them to namespaces. When a quota is attached to a namespace, the jobs within the namespace may not consume more resources than the quota specification allows. + +This allows operators to partition a shared cluster and ensure that no single actor can consume the whole resources of the cluster. See the Resource Quotas Guide for more details. + +See the [Resource Quotas Guide](https://www.nomadproject.io/docs/enterprise/quotas/index.html) for a thorough overview. + +### Preemption +When a Nomad cluster is at capacity for a given set of placement constraints, any allocations that result from a newly scheduled service or batch job will remain in the pending state until sufficient resources become available - regardless of the defined priority. + +Enable the scheduler to automatically evict lower priority allocations of service and batch jobs so that allocations from higher priority jobs can be placed. This behavior ensures that critical workloads can run when resources are limited or when partial outages require workloads to be rescheduled across a smaller set of client nodes. + +### Sentinel Policies +In Nomad Enterprise, operators can create Sentinel policies for fine-grained policy enforcement. Sentinel policies build on top of the ACL system and allow operators to define policies such as disallowing jobs to be submitted to production on Fridays. These extremely rich policies are defined as code. + +See the [Sentinel Policies Guide](https://www.nomadproject.io/guides/governance-and-policy/sentinel/sentinel-policy.html) for a thorough overview. + +## Try Nomad Enterprise +Click [here](https://www.hashicorp.com/go/nomad-enterprise) to set up a demo or request a trial of Nomad Enterprise. - - diff --git a/website/source/docs/enterprise/namespaces/index.html.md b/website/source/docs/enterprise/namespaces/index.html.md deleted file mode 100644 index 53796f7e1..000000000 --- a/website/source/docs/enterprise/namespaces/index.html.md +++ /dev/null @@ -1,26 +0,0 @@ ---- -layout: "docs" -page_title: "Nomad Enterprise Namespaces" -sidebar_current: "docs-enterprise-namespaces" -description: |- - Nomad Enterprise provides support for namespaces, which allows jobs and their - associated objects to be segmented from each other and other users of the - cluster. ---- - -# Nomad Enterprise Namespaces - -In [Nomad Enterprise](https://www.hashicorp.com/go/nomad-enterprise), a shared -cluster can be partitioned into [namespaces](/guides/governance-and-policy/namespaces.html) which allows -jobs and their associated objects to be isolated from each other and other users -of the cluster. - -Namespaces enhance the usability of a shared cluster by isolating teams from the -jobs of others, provide fine grain access control to jobs when coupled with -[ACLs](/guides/security/acl.html), and can prevent bad actors from negatively impacting -the whole cluster when used in conjunction with -[resource quotas](/guides/governance-and-policy/quotas.html). See the -[Namespaces Guide](/guides/governance-and-policy/namespaces.html) for a thorough overview. - -Click [here](https://www.hashicorp.com/go/nomad-enterprise) to set up a demo or -request a trial of Nomad Enterprise. diff --git a/website/source/docs/enterprise/preemption/index.html.md b/website/source/docs/enterprise/preemption/index.html.md deleted file mode 100644 index eeb61cbfd..000000000 --- a/website/source/docs/enterprise/preemption/index.html.md +++ /dev/null @@ -1,28 +0,0 @@ ---- -layout: "docs" -page_title: "Nomad Enterprise Preemption" -sidebar_current: "docs-enterprise-preemption" -description: |- - Nomad Enterprise preemption capabilities enable the scheduler to temporarily - evict lower priority allocations for service and batch jobs so that - higher priority allocations can be placed. ---- - -# Nomad Enterprise Preemption - -When a Nomad cluster is at capacity for a given set of placement constraints, any allocations -that result from a newly scheduled service or batch job will remain in the pending state until -sufficient resources become available - regardless of the defined priority. - -[Preemption](/docs/internals/scheduling/preemption.html) capabilities in -[Nomad Enterprise](https://www.hashicorp.com/go/nomad-enterprise) enable the scheduler to temporarily -evict lower [priority](/docs/job-specification/job.html#priority) allocations from service and -batch jobs so that the allocations from higher priority jobs can be placed. This behavior -ensures that critical workloads can run when resources are limited or when partial outages require -workloads to be rescheduled across a smaller set of client nodes. - -See the [Preemption internals documentation](/docs/internals/scheduling/preemption.html) for a -more detailed overview. Preemption for service and batch jobs can be enabled using the [scheduler config API endpoint](/api/operator.html#update-scheduler-configuration). - -Click [here](https://www.hashicorp.com/go/nomad-enterprise) to set up a demo or -request a trial of Nomad Enterprise. \ No newline at end of file diff --git a/website/source/docs/enterprise/quotas/index.html.md b/website/source/docs/enterprise/quotas/index.html.md deleted file mode 100644 index 066ee2836..000000000 --- a/website/source/docs/enterprise/quotas/index.html.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -layout: "docs" -page_title: "Nomad Enterprise Resource Quotas" -sidebar_current: "docs-enterprise-quotas" -description: |- - Nomad Enterprise provides support for applying resource quotas to namespaces - which restricts the overall resources that jobs within the namespace are - allowed to consume. ---- - -# Nomad Enterprise Resource Quotas - -In [Nomad Enterprise](https://www.hashicorp.com/go/nomad-enterprise), operators can -define [quota specifications](/guides/governance-and-policy/quotas.html) and apply them to namespaces. -When a quota is attached to a namespace, the jobs within the namespace may not -consume more resources than the quota specification allows. - -This allows operators to partition a shared cluster and ensure that no single -actor can consume the whole resources of the cluster. See the -[Resource Quotas Guide](/guides/governance-and-policy/quotas.html) for more details. - -Click [here](https://www.hashicorp.com/go/nomad-enterprise) to set up a demo or -request a trial of Nomad Enterprise. diff --git a/website/source/docs/enterprise/sentinel/index.html.md b/website/source/docs/enterprise/sentinel/index.html.md deleted file mode 100644 index ecce75527..000000000 --- a/website/source/docs/enterprise/sentinel/index.html.md +++ /dev/null @@ -1,36 +0,0 @@ ---- -layout: "docs" -page_title: "Nomad Enterprise Sentinel Policy Enforcement" -sidebar_current: "docs-enterprise-sentinel" -description: |- - Nomad Enterprise provides support for policy enforcement using Sentinel. ---- - -# Nomad Enterprise Sentinel Policy Enforcement - -In [Nomad Enterprise](https://www.hashicorp.com/go/nomad-enterprise), operators can -create [Sentinel policies](/guides/governance-and-policy/sentinel/sentinel-policy.html) for fine-grained policy -enforcement. Sentinel policies build on top of the ACL system and allow operators to define -policies such as disallowing jobs to be submitted to production on -Fridays. These extremely rich policies are defined as code. For example, to -restrict jobs to only using the Docker driver, the operator would define and apply -the following policy: - -``` -# Only allows Docker based tasks -main = rule { all_drivers_docker } - -# all_drivers_docker checks that all the drivers in use are Docker -all_drivers_docker = rule { - all job.task_groups as tg { - all tg.tasks as task { - task.driver is "docker" - } - } -} -``` - -See the [Sentinel Policies Guide](/guides/governance-and-policy/sentinel/sentinel-policy.html) for additional details and examples. - -Click [here](https://www.hashicorp.com/go/nomad-enterprise) to set up a demo or -request a trial of Nomad Enterprise. diff --git a/website/source/guides/operations/index.html.md b/website/source/guides/operations/index.html.md index 82403fa74..089563343 100644 --- a/website/source/guides/operations/index.html.md +++ b/website/source/guides/operations/index.html.md @@ -8,6 +8,7 @@ description: |- # Nomad Operations -The Nomad Operations guides section provides best practices and guidance for -operating Nomad in a real-world production setting. Please navigate the -appropriate sub-sections for more information. \ No newline at end of file +The Nomad Operations guides section provides best practices and guidance for +operating Nomad in a real-world production setting. + +Please navigate the appropriate sub-sections for more information. diff --git a/website/source/layouts/docs.erb b/website/source/layouts/docs.erb index 4c9b6b750..e8deffbb6 100644 --- a/website/source/layouts/docs.erb +++ b/website/source/layouts/docs.erb @@ -521,20 +521,26 @@ > Nomad Enterprise