Skip to content

Commit

Permalink
adds the dedicated isolation docs
Browse files Browse the repository at this point in the history
  • Loading branch information
corkrean committed Nov 3, 2023
1 parent 54ef3b6 commit 57ff4a9
Show file tree
Hide file tree
Showing 7 changed files with 14 additions and 2 deletions.
2 changes: 1 addition & 1 deletion docs/spicedb-dedicated/dedicated-configuration.md
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ There are two rollout strategies: `rolling update` and `immediate`.

### Define Cluster(s)

![Alt text](image-4.png)
<img src={require("/img/define-clusters.png").default} alt="define clusters" />

#### Single region deployment

Expand Down
11 changes: 11 additions & 0 deletions docs/spicedb-dedicated/dedicated-isolation.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
# SpiceDB Dedicated Isolation

SpiceDB Dedicated isolates your workloads from other customers. Cloud accounts, compute resources, databases, and networking are all dedicated to you.

Additionally, SpiceDB allows you to deploy multiple isolated Permissions Systems into a single SpiceDB Dedicated environment. Each Permissions Systems has it’s own schema and set of relationships. Also, these Permissions Systems impose memory and CPU limits so one Permissions System can’t crowd out another Permissions System.

By default, API tokens are scoped to a particular Permissions System. [Fine Grained Access Management (FGAM)](/spicedb-dedicated/fgam) can take this farther by restricting API tokens to specified APIs, object types, or object IDs.

The below diagram gives an overview of the SpiceDB Dedicated isolation model.

<img src={require("/img/dedicated-isolation.png").default} alt="dedicated isolation model" />
Binary file removed docs/spicedb-dedicated/image-4.png
Binary file not shown.
2 changes: 1 addition & 1 deletion docs/spicedb-dedicated/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ Please [schedule a call](https://authzed.com/call) to learn more.

## How is SpiceDB Dedicated deployed?

AuthZed provisions and manages an environment for you in a private account within our cloud provider organization. It comes with everything needed to run single and multi-region SpiceDB Permissions Systems in a cloud of your choice. We support AWS and GCP today, with Azure support coming. All resources are fully isolated and dedicated to you.
AuthZed provisions and manages an environment for you in a private account within our cloud provider organization. It comes with everything needed to run single and multi-region SpiceDB Permissions Systems in a cloud of your choice. We support AWS and GCP today, with Azure support coming. [All resources are fully isolated and dedicated to you.](/spicedb-dedicated/dedicated-isolation)

## Pricing

Expand Down
1 change: 1 addition & 0 deletions sidebars.js
Original file line number Diff line number Diff line change
Expand Up @@ -60,6 +60,7 @@ module.exports = {
'spicedb-dedicated/fgam',
'spicedb-dedicated/audit-logging',
'spicedb-dedicated/dedicated-configuration',
'spicedb-dedicated/dedicated-isolation',
{
type: 'category',
label: 'Networking',
Expand Down
Binary file added static/img/dedicated-isolation.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added static/img/define-clusters.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 57ff4a9

Please sign in to comment.