Lifecycle Management #
The life of a piece of hardware or software at Deevnet, from being chosen to being taken out of service, and what has to be true at each stage. How to carry out each stage is in the runbook’s Lifecycle section. This section says what each one requires.
Stages #
| Stage | What has to be true | Policy | Recorded in |
|---|---|---|---|
| 1. Select | A need is met by a selection, with its rationale and alternatives | This section | Its Implementation & Tooling page, or an ADR |
| 2. Certify | The selection is tested against the criteria before anything relies on it | Certification | Certification records |
| 3. Deploy | It goes in through a change that cites the certification | Change Management | A change record, and the Software Catalog |
| 4. Discover | What is running is checked against the catalog, and each item’s upstream is watched for releases, end of life and advisories. Each finding is triaged into one of the stages below | Discovery | The catalog; findings in change records, certifications or the risk register |
| 5. Patch | It stays on a certified line. Patches are applied within the line, after their notes are read | Vulnerability Management, Change Management | Change records, and the catalog |
| 6. Upgrade | A new line is certified before the change that moves to it | Certification, then Change Management | A new certification revision, then a change record of type Upgrade |
| 7. Retire | It is removed through a change: its configuration, secrets, artifacts and records of it in inventory, not just stopped | Change Management | A change record (e.g. CHG-0017); removed from the catalog; its certification marked Superseded |
Stages 2 and 6 are where certification sits. It is the gate between choosing something and relying on it, and it is passed again each time the thing moves to a new line. Stage 4 is what notices that a new line, a patch or an end of life has arrived.
What tracks where an item is #
- In service, and at what version: the Software Catalog, the system of record for versions.
- Whether it was certified, and against what: its certification record.
- How it got there, and every change since: the change records that name it.
Everything in service today predates this section. It entered at stage 3 without stage 2, and is Not yet certified until its next upgrade, or sooner.