Documentation
Production readiness is a set of gates, not a label.
The current release supports local development, evaluation, and compatibility testing. Shared or production environments need additional controls and evidence.
No internet-facing or regulated production launch should proceed while a required gate remains blocked.
Current baseline
Sceptre already provides versioned images, a Helm chart, namespace-scoped RBAC, health probes, resource limits, migrations, validation and drift history, and versioned audit evidence. These are foundations, not production certification.
Controls still required
Identity and sessions
Approved identity lifecycle, registration policy, secure sessions, and authorization tests.
Durable work
A leased persistent queue, idempotency, restart recovery, and multi-replica correctness.
Data protection
Encryption, least privilege, automated backups, clean restore tests, and RPO/RTO evidence.
Kubernetes security
Restricted workload posture, NetworkPolicies, service-account isolation, and RBAC review.
Serving security
Authenticated inference, rate limits, tenant isolation, and a safe endpoint lifecycle.
Observability
Central telemetry, alerts, SLOs, retention, governance reporting, and actionable runbooks.
Evidence for every gate
Assign a named owner and record the evidence location, test date, application and chart version, environment, result, and any accepted exception expiry. A configuration value is not proof; a test result is.
Qualification also covers
- Memory-bounded dataset ingestion and large-data evidence
- Multi-node availability, disruption tests, and dependency high availability
- Image provenance, SBOMs, vulnerability scanning, signing, and immutable deployment
- Upgrade rehearsal, rollback decisions, disaster recovery, and restore testing
- Representative capacity and concurrency tests under measured load
The complete production-readiness guide is the source of truth for current gates and status.