Please read the Project README if you have not done so already.
This alternative form of the main checklist lists tasks grouped by topic. In alphabetical order, topics currently used are:
- CAS
- Kubernetes & IT Admin
- Observability
- Organization & Governance
- PostgreSQL
- SAS Administration
- SAS Programming Run-time
5 tasks in topic CAS
| # ▴ | Title | Description | Frequency |
|---|---|---|---|
| 0320 | Secure Default Caslibs, especially the Public Caslib | Review and change default access controls on default CAS libraries | |
| 0330 | Consider relocating CAS_DISK_CACHE | Relocate the CAS_DISK_CACHE for CAS servers | |
| 0340 | Configure CAS Allowlist | Configure CAS allowlist for user-defined CAS libraries | |
| 0350 | Configure External Access to CAS | Configure access to CAS from outside your SAS Viya deployment | |
| 0650 | Configure CAS server startup to load data | Configure CAS server startup to load data | Monthly |
17 tasks in topic Kubernetes & IT Admin
| # ▴ | Title | Description | Frequency |
|---|---|---|---|
| 0010 | Automate your SAS Viya Deployment Process | Automate the process of creating and configuring your SAS Viya deployment | |
| 0020 | Install the SAS Viya CLI | Ensure you have installed the sas-viya cli and its plugins. | |
| 0030 | Develop an update plan | Develop an update plan: outline tasks required before, during and after an update | |
| 0040 | Maintain a Secure Password Database | Maintain a secure and encrypted password-protected password database using an appropriate software tool or service | |
| 0050 | Update TLS certificates | Generate new or renew expiring TLS certificates used for encryption of data in transit. | |
| 0060 | Load POSIX attributes | Load POSIX attributes for identities when attributes are not returned from the authentication provider | |
| 0070 | Create and Configure User home-directories | Create and configure user-home directories | |
| 0080 | Ensure You Have Provided Sufficient Storage for Path-Based Caslibs | Ensure you have provided sufficient filesystem storage of an appropriate type for path-based caslibs. | |
| 0090 | Define a Process for Updating External Credentials | Define a when and how you will update credentials that are stored in SAS Viya for external systems such as databases, when they change | |
| 0100 | Know when to renew your OIDC client secret | Open ID Connect uses expiring client secrets with a maximum lifetime of 2 years. If your SAS Viya deployment is configured to use OIDC, ensure that you know when this client secret expires so that you can renew it before it does. | |
| 0110 | Configure Open Source Integration | Configure open source integration | |
| 0120 | Review Tuning Recommendations | Review SAS Viya platform tuning recommendations and apply as needed | |
| 0130 | Configure CORS and CSRF settings | Configure the SAS Viya platform's Cross-Origin Resource Sharing (CORS) and Cross-Site Request Forgery (CSRF) settings for deployments behind a DNS alias or proxy, and for SAS Visual Analytics | |
| 0460 | Renew your SAS Viya License | Obtain and apply a new SAS Viya platform license before your existing license expires | Annually |
| 0470 | Update the SAS Viya CLI | Ensure you have installed the sas-viya cli and its plugins | Quarterly |
| 0480 | Renew your OIDC client secret | If your SAS Viya deployment is configured to use OIDC, renew your OIDC client secret before it expires. | When secret changes |
| 0490 | Update External Credentials | When external credentials change, follow your defined process to update them in SAS Viya | When credentials change |
13 tasks in topic Observability
| # ▴ | Title | Description | Frequency |
|---|---|---|---|
| 0190 | Select Log & Metric Monitoring and Alerting Solution | Choose a log and metric monitoring and alerting solution | |
| 0200 | Set Up Monitoring and Alerting | Learn how to deploy, update and use either SAS Viya Monitoring for Kubernetes or a cloud provider's observability tools to leverage logging, monitoring and alerting capabilties in your Viya platform. | |
| 0210 | Understand how to Check the Status of Services | Ensure you know how to check the status of all SAS Viya services ad hoc at any time | |
| 0220 | Configure audit record archival | Configure and schedule the archiving of SAS Viya audit records. | |
| 0230 | Enable job to purge archived audit records | Enable the routine purging of archived audit records from the archive location (PV) | |
| 0500 | Check the Status of SAS services | Regularly check the status of SAS services | Daily |
| 0510 | Monitor Memory, CPU, Network, and Disk Throughput Usage | Monitor memory usage, CPU usage, network I/O usage, disk throughput usage, input/output operations per second (IOPS), etc | Daily |
| 0520 | Monitor Log Messages | Monitor log messages | Daily |
| 0530 | Examine the User Activity Report | Examine the user activity report | Weekly |
| 0540 | Change log levels | Change the log threshold for a SAS component or service, to increase or decrease the detail of log messages it produces | When troubleshooting |
| 0550 | Monitor Storage Space | Monitor the disk space used for SAS Viya | Weekly |
| 0560 | Monitor Observability Storage | Monitor the disk or other storage space used for the log and metric monitoring tools, and other observability tools deployed to monitor SAS Viya | Weekly |
| 0570 | Stop and Start SAS Viya's Monitoring and Logging components | Ensure you can stop the logging and monitoring solution and that you can start it back up when needed again. | When not in use |
5 tasks in topic Organization & Governance
| # ▴ | Title | Description | Frequency |
|---|---|---|---|
| 0140 | Service Level Agreement | For enterprise-scale deployments, define a Service Level Agreement (SLA) | |
| 0150 | Define your organization’s SAS support team structure, roles, and responsibilities | Define your organization’s SAS support team structure, roles, and responsibilities | |
| 0160 | Premium Support | Consider whether you require premium or customized support for your SAS deployment | |
| 0170 | Security Policy | Write and maintain a security policy that covers the SAS Viya deployment | |
| 0180 | Authorization Model | Write and maintain a security model or an authorization model |
2 tasks in topic PostgreSQL
| # ▴ | Title | Description | Frequency |
|---|---|---|---|
| 0670 | Manage content stored in PostgreSQL | Manage content stored in PostgresQL | Monthly |
| 0680 | Maintain SAS Infrastructure Data Server | Perform routine maintenance on the SAS Infrastructure Data Server | Monthly |
16 tasks in topic SAS Administration
| # ▴ | Title | Description | Frequency |
|---|---|---|---|
| 0240 | Validate your SAS Viya Deployment | Define a set of tests to validate that your SAS Viya deployment is functioning correctly | |
| 0250 | Define a backup and restore strategy | Define a backup and restore strategy | |
| 0260 | Know how to Contact SAS Technical Support for Help | Ensure all SAS platform administration staff know how to contact SAS Technical Support for help | |
| 0270 | Identify Components of SAS and Third-Party Software | Ensure you can identify the components of SAS and third-party software that make up SAS Viya | |
| 0280 | Decide approach to applying updates | Decide how and when your SAS Viya software will be updated | |
| 0290 | Configure SAS Studio Preferences | Configure SAS Studio Preferences | |
| 0300 | Define a Process for Onboarding and Offboarding Users | Document any steps that must be performed when new users are onboarded and offboarded | |
| 0310 | Secure the sasboot password | Disable the sasboot password reset feature after you have finished setting up identities and initial administrators | |
| 0450 | Design and Maintain a Schedule of SAS Administration Housekeeping Activities | Design and maintain a schedule of SAS Viya platform administration housekeeping activities, specifying when regular tasks should be performed. | |
| 0580 | Onboard and Offboard Users | Onboard new users and offboard old users | Weekly |
| 0590 | Keep your Software Current | Keep your software current with patch and version updates to stay within Standard Support guidelines. | Monthly |
| 0600 | Regularly Re-Validate your SAS Viya Deployment | Run a set of tests to validate that your SAS Viya deployment is functioning correctly | Weekly |
| 0610 | Periodically Run an Inventory Scan on the Viya Environment | Periodically Run an Inventory Scan on the Viya Environment | Monthly |
| 0620 | Stop and Start SAS Viya software | Ensure you can scale your SAS Viya deployment to zero, and that you can scale it back up when needed again. | When not in use |
| 0630 | Inspect the Status of Scheduled Jobs | Inspect the status of scheduled jobs | Daily |
| 0640 | Test the Process to Restore From Backups | Periodically test the process to restore from backups | Monthly |
10 tasks in topic SAS Programming Run-time
| # ▴ | Title | Description | Frequency |
|---|---|---|---|
| 0360 | Set location for SAS Work and other Programming Run-Time Temporary Files | Move SAS Work and other Programming Run-Time Temporary Files to a better location than the default | |
| 0370 | Configure Common Programming Run-Time Autoexec Statements | Configure statements in SAS Programming Run-Time Autoexec code blocks, to set commonly used SAS options for macro programming, performance tuning, use of mail servers and pre-assigning SAS libraries. | |
| 0380 | Modify Launcher and SAS Programming Run-Time Server Contexts | Modify Launcher and Server contexts for SAS Compute Server, SAS Connect Server and SAS Batch Server | |
| 0390 | Define Library Connection Data Sources as a Resource in SAS Programming Run-Time Contexts | Compute, Connect and Batch contexts can be associated with Required Resources, the first of which is a Library Connection. | |
| 0400 | Configure lockdown for SAS Programming run-time servers | Configure lockdown for SAS Programming Run-Time servers | |
| 0410 | Configure Programming Allowlist | Configure SAS Programming Run-Time for user-defined paths | |
| 0420 | Configure umask for SAS Programmning run-time servers | Configure umask to e.g. 0002 for SAS Programming Run-Time servers, so that files created by users (including datasets in path-based libraries) are read-write for members of the user's primary POSIX group | |
| 0430 | Set User Process Limit | Set the maximum number of launched compute, connect or batch programming run-time pods each user may run simultaneously | |
| 0440 | Tune the Programming Run-Time | Tune the SAS Viya Platform Programming Run-time for better performance with your workload | |
| 0660 | Monitor Compute Sessions | Use the sas-viya CLI, log and metric monitoring tools to monitor compute sessions | Daily or as often as necessary |
Generated by build_from_template.py on: 19 Dec 2024 13:58:07.