End-of-Support warning for products and operators #733
Description
Description
Note
This is part of our Cyber Resilience Act (CRA) compliance journey
As a user of SDP I want to be informed if I'm using an outdated operator or a version of a product that is deprecated.
CRA Text
Manufacturers shall ensure that the end date of the support period referred to in paragraph 8, including at least the month and the year, is clearly and understandably specified at the time of purchase in an easily accessible manner and, where applicable, on the product with digital elements, its packaging or by digital means.
Where technically feasible in light of the nature of the product with digital elements, manufacturers shall display a notification to users informing them that their product with digital elements has reached the end of its support period.
Note
There are other issues related to this article that cover different aspects of the paragraph.
Value
- We want this to be compliant with the CRA
- We want this to encourage our users to upgrade regularly and not stay on unsupported versions of SDP
Tasks
- Our operators should be aware of the date they have been first released and should warn the user if a newer version is available (with some safety margin as our releases are not entirely predictable)
- To refine are the ways in which users are to be notified
- Some ideas: Set a status, expose EoL date and status via metrics, create a ConfigMap with information, log output, ...
- Our operators should also warn users if they are installing a product version which we have declared as deprecated
- Also to refine the ways in which should be done
- Clearly document the behavior for operators and products including ways to monitor for this
Release Notes
TODO once decision has been reached how and what we are going to implement