Search documentation

Type to search the documentation

↑↓ to navigate Enter to select Esc to close

Home
Explanations
Tutorials
- Hello Nais
Workloads
- 💡 Explanations
- 🎯 How-To
- 📚 Reference
- Application
  - 💡 Explanations
    
    Exposing your application
  - 🎯 How-To
    
    Create application
    Delete your application
    Expose an application
    Redirect a client
  - 📚 Reference
    
    Nais Application example YAML
    Nais Application reference
    Automatic Scaling
    Ingress reference
- Nais job
  - 🎯 How-To
    
    Create job
    Delete your job
  - 📚 Reference
    
    Nais Job example YAML
    Nais Job reference
Build and deploy
- 🎯 How-To
- 📚 Reference
  - Deploy action configuration
Authentication and authorization
Observability
- 🎯 How-To
  - Get started with auto-instrumentation
- 📚 Reference
  - OpenTelemetry Auto-Instrumentation Configuration
  - Observability Glossary
- Alerting
  - 🎯 How-To
    
    Create alert in Grafana
    Customize Prometheus alerts
    Create alert with Prometheus
  - 📚 Reference
    
    Prometheus Alerting Rule Reference
- Frontend apps
- Logging
  - 🎯 How-To
    
    Access secure logs
    Audit logs
    Disable persistent application logs
    Enable secure logs
    View logs from the command line
    Adding logs to your Grafana dashboard
    Metrics and alerts for logs
    Get started with Grafana Loki
    Create alerts in nav-logs (OpenSearch Dashboards)
    Get started with nav-logs
    Get started with Team Logs
  - 📚 Reference
    
    Log Destinations
    DQL Reference
    LogQL Reference
    Loki Labels Reference
    Loki Metrics Reference
- Metrics
  - 🎯 How-To
    
    Create a dashboard in Grafana
    Expose metrics from your application
    Show Grafana on infoscreen
    Push metrics to Prometheus
  - 📚 Reference
    
    Global Metrics
    Grafana Glossary
    Metrics reference
    OpenTelemetry Metrics
    PromQL Reference
- Distributed Tracing
  - 🎯 How-To
    
    Trace context propagation
    Correlate traces and logs
    Tracing data in Elastic APM
    Get started with Grafana Tempo
  - 📚 Reference
    
    Span Metrics
    OpenTelemetry Trace Semantic Conventions
    TraceQL Reference
- Tutorials
  - Getting Started with Observability in Nais
  - Instrumenting Your Application with OpenTelemetry
Persistent Data Overview
Other services
- CDN
  - 🎯 How-To
    
    Upload assets to the CDN
    Manage CDN assets
  - 📚 Reference
    
    CDN Upload Action
- Secrets
  - 🎯 How-To
    
    Create and manage secrets in Console
    Use a secret in your workload
    Advanced: Secrets with binary data
  - 📚 Reference
- Feature Toggling
- Anti-Virus Scanning
- Leader Election
  - 🎯 How-To
    
    Enable Leader Election
- Vulnerability insights and management
  - 🎯 How-To
    
    Generate SBOM
  - 📚 Reference
Manage your workloads and services
- 🎯 How-To
  - Setup command line access
  - Create a Nais team
- Console
- CLI
  - 🎯 How-To
    
    Install nais-cli
    Troubleshooting nais-cli
  - 📚 Reference
    
    aiven command
    debug command
    device command
    kubeconfig command
    postgres command
    validate command
- naisdevice
  - Explanations
    
    Just In Time Access (JITA)
  - How To
    
    Install Kolide
    Install naisdevice
    Troubleshooting naisdevice
    Uninstall Kolide
    Uninstall naisdevice
    Update naisdevice
Tags
Legal

Platform risk assessments (ROS) ¶

The nais team has conducted the following risk assessments:

GCP Lagring av data (Buckets og Postgres)
GCP Tilgangskontrolloppsett
Tilgang til Kafka fra GCP
Logger på GCP
Google Kubernetes Engine
Sentry i GCP
Aiven Kafka - Leverandørvurdering
Aiven ElasticSearch
Google Secret Manager
Dataplattform (including BigQuery)
Bruk av ansatt.nav.no
Bruk av Nais Console

(Note that all risk assessments link to the NAV internal tool TryggNok.)

Last updated January 17, 2025

Created October 22, 2020

View source on GitHub