diff --git a/website/source/docs/enterprise/index.html.md b/website/source/docs/enterprise/index.html.md new file mode 100644 index 00000000000..1ded1949d9c --- /dev/null +++ b/website/source/docs/enterprise/index.html.md @@ -0,0 +1,20 @@ +--- +layout: "docs" +page_title: "Nomad Enterprise" +sidebar_current: "docs-enterprise" +description: |- + Nomad Enterprise features a number of capabilities beyond the open source + offering that may be beneficial in certain workflows. +--- + +# Nomad Enterprise + +Nomad Enterprise simplifies operations by automating workflows. It adds support +for microservices deployments across complex network topologies. It also +increases both scalability and resilience. Features include: + +- [Namespaces](/docs/enterprise/namespaces.html) +- [Namespace Quotas](/docs/enterprise/quotas.html) +- [Sentinel Policy Enforcement](/docs/enterprise/sentinel.html) + +These features are part of [Nomad Enterprise](https://www.hashicorp.com/products/nomad/). diff --git a/website/source/docs/enterprise/namespaces.html.md b/website/source/docs/enterprise/namespaces.html.md new file mode 100644 index 00000000000..6dde6f86020 --- /dev/null +++ b/website/source/docs/enterprise/namespaces.html.md @@ -0,0 +1,22 @@ +--- +layout: "docs" +page_title: "Nomad Enterprise Namespaces" +sidebar_current: "docs-enterprise-namespaces" +description: |- + Nomad Enterprise provides support for namespaces, which allows jobs and their + associated objects to be segmented from each other and other users of the + cluster. +--- + +# Nomad Enterprise Namespaces + +In [Nomad Enterprise](https://www.hashicorp.com/products/nomad/), a shared +cluster can be partioned into [namespaces](/guides/namespaces.html) which allows +jobs and their associated objects to be isolated from each other and other users +of the cluster. + +Namespaces enhance the usability of a shared cluster by isolating teams from the +jobs of others, provide fine grain access control to jobs when coupled with +[ACLs](/guides/acl.html), and can prevent bad actors from negatively impacting +the whole cluster when used in conjunction with +[quotas](/docs/enterprise/quotas.html). diff --git a/website/source/docs/enterprise/quotas.html.md b/website/source/docs/enterprise/quotas.html.md new file mode 100644 index 00000000000..25289e14c6d --- /dev/null +++ b/website/source/docs/enterprise/quotas.html.md @@ -0,0 +1,19 @@ +--- +layout: "docs" +page_title: "Nomad Enterprise Namespace Quotas" +sidebar_current: "docs-enterprise-quotas" +description: |- + Nomad Enterprise provides support for applying quotas to namespaces which + restricts the overall resources that jobs within the namespace are allowed to + consume. +--- + +# Nomad Enterprise Namespace Quotas + +In [Nomad Enterprise](https://www.hashicorp.com/products/nomad/), operators can +define quota specifications and apply them to namespaces. When a quota is +attached to a namespace, the jobs within the namespace may not consume more +resources than the quota specification allows. + +This allows operators to partition a shared cluster and ensure that no single +actor can consume the whole resources of the cluster. diff --git a/website/source/docs/enterprise/sentinel.html.md b/website/source/docs/enterprise/sentinel.html.md new file mode 100644 index 00000000000..b8a1349dfb8 --- /dev/null +++ b/website/source/docs/enterprise/sentinel.html.md @@ -0,0 +1,31 @@ +--- +layout: "docs" +page_title: "Nomad Enterprise Sentinel Policy Enforcement" +sidebar_current: "docs-enterprise-sentinel" +description: |- + Nomad Enterprise provides support for policy enforcement using Sentinel. +--- + +# Nomad Enterprise Sentinel Policy Enforcement + +In [Nomad Enterprise](https://www.hashicorp.com/products/nomad/), operators can +create [Sentinel policies](/guides/sentinel-policy.html) for fine grain policy +enforcement. Sentinel policies build on top of the ACL system and allow operators to define +fine grain policies such as disallowing jobs to be submitted to production on +Fridays. These extremely rich policies are defined as code. For example, to +restrict jobs to only using the Docker driver, the operator would define and apply +the following policy: + +``` +# Only allows Docker based tasks +main = rule { all_drivers_docker } + +# all_drivers_docker checks that all the drivers in use are Docker +all_drivers_docker = rule { + all job.task_groups as tg { + all tg.tasks as task { + task.driver is "docker" + } + } +} +``` diff --git a/website/source/guides/namespaces.html.markdown b/website/source/guides/namespaces.html.markdown index 996841c4b7b..3febd6f3e84 100644 --- a/website/source/guides/namespaces.html.markdown +++ b/website/source/guides/namespaces.html.markdown @@ -3,7 +3,7 @@ layout: "guides" page_title: "Namespaces" sidebar_current: "guides-namespaces" description: |- - Nomad Enterprise has support for namespaces, which allows jobs and their + Nomad Enterprise provides support for namespaces, which allows jobs and their associated objects to be segmented from each other and other users of the cluster. --- diff --git a/website/source/layouts/_sidebar.erb b/website/source/layouts/_sidebar.erb index bee68ba1ec3..da323766903 100644 --- a/website/source/layouts/_sidebar.erb +++ b/website/source/layouts/_sidebar.erb @@ -11,6 +11,7 @@
  • Docs
  • API
  • Community
  • +
  • Enterprise
  • Security
  • Press Kit
  • diff --git a/website/source/layouts/docs.erb b/website/source/layouts/docs.erb index 42ca6e8f2d7..2ee995b91a5 100644 --- a/website/source/layouts/docs.erb +++ b/website/source/layouts/docs.erb @@ -412,6 +412,24 @@ > FAQ + +
    + + > + Nomad Enterprise + + + <% end %> diff --git a/website/source/layouts/layout.erb b/website/source/layouts/layout.erb index ffffd6747f4..6318cd065dc 100644 --- a/website/source/layouts/layout.erb +++ b/website/source/layouts/layout.erb @@ -85,6 +85,7 @@
  • Docs
  • API
  • Community
  • +
  • Enterprise
  • <%= inline_svg "download.svg" %> Download @@ -117,6 +118,7 @@
  • Docs
  • API
  • Community
  • +
  • Enterprise
  • Security
  • Press Kit