Maintenance Activities and Schedule

In order to keep the platform up-to-date with the latest available security patches and features, the MCaaS team performs regularly patches and upgrades platform components.

Except for Jenkins patching, regular MCaaS maintenance should not incur downtime for workloads configured for high availability. Jenkins patching incurs a short period of downtime, typically 20 minutes or less. During this time, application builds are unavailable. Existing workloads are unaffected.

Please submit an incident ticket to MCaaS if you see any unexpected behavior associated with an upgrade.

Calendar

The FCS Maintenance Calendar shows planned MCaaS maintenance. You can be added to an email notification distro by navigating to the calendar, then clicking the FCS Request Form button.

Schedule

Regular MCaaS maintenance occurs on Mondays and Wednesdays. Patching activity is staggered across two weeks:

Day	Week	Activity
Monday	1	EKS AMI and addon patching (Staging)
Wednesday	1	<p> EKS AMI and addon patching (Prod) </p> <p> Helm backend chart patching (Dev/Test) </p> <p> Tenant Jenkins Patching ("A") </p> Weekly jumpbox yum and reboot (core hours)
Monday	2	Helm backend chart patching (Stage)
Wednesday	2	<p> EKS AMI and addon patching (Dev/Test) </p> <p> Helm backend chart patching (Prod) </p> Weekly jumpbox yum and reboot (core hours)

EKS AMIs and Helm charts

EKS AMIs are updated one week. Helm charts are updated the next.

• Staging environments are updated every Monday.

• Dev/Test environments are updated every Wednesday.

• Production environments are also updated every Wednesday. These are staggered with Dev/Test. When Dev/Test EKS AMIs are being updated, Production helm charts are also being patched.

Jenkins patching

Occurs every other Wednesday, during the same day Production EKS AMIs are updated.

Data Jumpboxes

These are fully rebuilt the first Monday every month. They also receive yum updates and are rebooted overnight once a week.

FCS Tools

MCaaS integrates with a number of GSA SecOps tools including Stackrox/Anchore, and FCS tools including Forgerock IDM and Github enterprise. Any updates, patches, or downtime associated with these FCS services is at the discretion of the responsible team. Any questions or concerns should be brought to the attention of that team.

DataDog

The DataDog observability platform is updated by the vendor; any downtime will be at their behest.