PS Package Outcomes, Module Appendix

Level 1

Platform onboarding

Authentication setup

Customer must specify the authentication method they wish to use for logging into Harness and validate the login to the platform with the specified login method

• SAML
• LDAP
• OAuth

RBAC setup

Base RBAC functionality for users is implemented and validated with the users and user groups mapped to Roles

• SCIM
• Just in time provisioning

Organizational structure

Customer must specify the organizational structure which needs to be mapped with the Account/Organization/Project structure of Harness

Secret Manager

Integrate with customer's secret manager platform and validate the retrieval of these secrets in a sample pipeline

• AWS KMS and AWS secret manager
• GCP KMS and GCP secret manager
• Hashicorp vault secret manager
• Azure key vault secret manager
• Custom secret manager

Notifications

• Integrate with customers SMTP configuration
• Customer has a delegate which can send email notifications

Level 1

SMP Install

Initial Installation

• Connected mode
• Nginx
• Internal Database
• Self signed certificate

Customer must specify the infrastructure where they wish to install the Harness Self Managed Platform

• Managed k8s: EKS (AWS), GKE (GCP), AKS (Azure)
• Self managed k8s

Advanced installation with Air Gapped mode

Customer must specify and provide the artifact repo they want to use with Air Gapped mode

Advanced installation with Istio

Customer must specify and bring their own Istio for the installation

Advanced installation with external database

Customer must bring their own external databases for MongoDB, PostgresQL, Redis, TimescaleDB

Backup and restore or Disaster recovery

• Customer must have Velero buckets for backup and restore
• Suggest disaster recovery strategy and support the architecture

Level 1

• Up to 4 basic chaos experiments (for one k8s application)
• Up to 4 basic chaos experiments (for one Linux/Windows application)
• Up to 1 resilience probe integration

Level 2

• Up to 8 basic chaos experiments (for one k8s application)
• Up to 8 basic chaos experiments (for one Linux/Windows application)
• Up to 8 resilience probe integrations

Level 3

• Up to 16 basic chaos experiments (for one k8s application)
• Up to 12 basic chaos experiments (for one Linux/Windows application)
• Up to 12 resilience probe integrations

Chaos Experiment Dependency Integration

All Chaos Experiment dependencies have been integrated

Change Management Integration

Experiment development integrated with change management process

Chaos Hub

Custom Chaos Hub setup

Pipeline Integration

Chaos Experiments integrated into CD pipelines

Basic Chaos Dashboards

Basic Chaos Dashboards configured and ready

Level 1

• Up to 12 chaos experiments (across 1-2 Apps)
• Up to 10 resilience probe templates (across 1-2 Apps)
• Up to 2 hours of Chaos Experiment Developer Training

Level 2

• Up to 50 chaos experiments (across 1-2 Apps)
• Up to 30 resilience probe templates (across 1-2 Apps)
• Up to 6 hours of Chaos Experiment Developer Training (including CD and APM integrations)

Level 3

• Up to 100 chaos experiments (across 1-2 Apps)
• Up to 50 resilience probe templates (across 1-2 Apps)
• Up to 8 hours of Chaos Experiment Developer Training (including CD and APM and LT integrations)

Chaos Engineering Center of Excellence

Establishing a cultural center of excellence for organization-wide Chaos Engineering / Resiliency practices

Customized Chaos Hub

Customized Chaos Hub setup and ready

Chaos Experiment Development Training

Engineers trained in best-practices for Experiment Development

Pipeline Integration

Automated resilience verification built into the deployment pipelines

Reporting & Dashboards

Reporting and dashboards setup

Change Management Integration

Experiment development integrated with change management process

Level 1

N/A

Level 2

• Reporting - OOTB Perspectives/Dashboards
• Up to 10 Auto Stopping Rules
• Up to 10 Asset Governance Rules
• Commitment Orchestrator - Visibility

Level 3

• Reporting - OOTB Perspectives/Dashboards
• Up to 20 Auto Stopping Rules
• Up to 20 Asset Governance Rules
• Commitment Orchestrator - Visibility

Setup

• Pre-sales to Post-sales Transition / POV involvement
• Project Kick off
• SCIM/SSO Implementation
• RBAC Implementation
• Create billing connector
• Cluster Costs (Delegate and 2 connectors) Implementation

Visualization

• Custom Perspective Implementation
• Custom Dashboard Implementation
• Cost Categories Implementation
• Anomaly Overview
• Budget Implementation

Impact

• Recommendations Overview
• AutoStopping Setup
• AutoStopping Schedule Implementation
• AutoStopping Traffic Implementation
• Asset Governance Setup
• Asset Governance Rule Enforcement
• Commitment Orchestrator Setup
• Commitment Orchestrator Review Recommendations

Level 1

N/A

Level 2 - Dashboard Migration

• Up to 20 additional custom Dashboards setup

Level 2

• Up to 10 Custom Perspective / Dashboard Templates
• Up to 40 Auto Stopping Rules with automation via TF/API to scale
• Up to 40 Asset Governance Rules with automation to scale

Level 3

• Up to 20 unique Custom Perspective / Dashboard Templates
• Up to 75 Auto Stopping Rules with automation via TF/API to scale
• Up to 75 Asset Governance Rules with automation to scale

Dashboard Migration

• Eligible for bulk purchases based on migration scope
• Dashboard Migration scope analysis
• Custom Dashboard Migration (estimated level of effort is 4 hours per Dashboard)

Visualization

• Custom Perspective Implementation
• Custom Dashboard Implementation
• Cost Categories Implementation
• Anomaly Overview
• Budget Implementation

Impact

• Recommendations Overview
• AutoStopping Setup / Schedule / Traffic Implementation
• Asset Governance Setup and Rule Enforcement
• Commitment Orchestrator Setup and Review Recommendations
• Automated purchasing and management of RIs and SPs through Commitment Orchestrator

Monthly Advisory

Monthly Advisory Services provides up to four (4) hours a month of continuous configuration and support to assist the Customer in their ongoing adoption journey

Ongoing Advisory for CCM Visualization

• Anomaly Overview
• Guidance for Custom Perspective, Custom Dashboard, Cost Categories, and Cost Budget Implementation

Ongoing Advisory for CCM Impact

• Recommendations overview
• AutoStopping Setup: guidance for schedule-based and traffic-based rules
• Asset Governance: guidance for setup and rule enforcement
• Commitment Orchestrator: guidance for setup and review of recommendations; guidance for automated purchasing and management of RIs and SPs

Level 1

Up to 10 Services

Level 2

Up to 35 Services

Level 3

Up to 75 Services

Onboard Application Services

Customers must specify the services they wish to target for Onboarding and agree upon the scope of the services they wish to target for onboarding.

Pipeline & GitOps Deployments

• Each Pipeline must deploy successfully to a respective target
• Working pipelines can deploy to any environment (non-prod or prod)
• Service must be deployed to an environment

Pipeline Configuration and Integration Configuration

• Shell script configuration; Service and environment onboarding
• Approval gate configuration; ServiceNow and Jira integration
• Bi-Directional Git Sync / Git Experience
• Deployment Step Configuration; Cloud Providers configured
• Infrastructures, Services and Environments configured

RBAC Setup for CD

User Groups, Users are all mapped to Roles to begin deployment

Delegate Setup for CD

• Delegate INIT SCRIPT are configured
• Delegate Upgrade process is defined
• Immutable and Custom Delegate Image - Process in place to maintain and update
• Network Connectivity to resources; High Availability of Delegates
• Prod vs Non Prod Access for Delegates

Level 1

Up to 40 additional services

Level 2

Up to 180 additional services

Level 3

Up to 375 additional services

Configure OPA Policies for Pipelines

Users will be able to govern their Deployments via Policies as Code. Level 1: Not Applicable; Level 2: Max 6 Policies; Level 3: Max 8 Policies

Configure Templates for the Pipelines to scale adoption

Users will have various templates configured in their account. Level 1: Max 4 Templates; Level 2: Max 12 Templates; Level 3: Max 20 Templates

Continuous Verification

Integrated health data sources with Harness CV. Level 1: 1 CV Step, 1 Monitored Service; Level 2: 3 CV Steps; Level 3: 5 CV Steps, 5 Monitored Services

Architecture Review

Customer gets a review of their current CD Practices and best practices from PS. Level 3 only: Applicable

Iterate on existing Pipeline Architecture

• Upgrading or extending of existing pipeline architecture
• Additional team onboarding to existing pipelines
• Building net new pipelines where appropriate

New Pipeline Onboarding

Customer creates Pipelines to help onboard the services with Harness support

Approvals for Deployments

Customers configure approvals; users will have configured JIRA, ServiceNow or a Harness Approval

Production Readiness

Users are deploying their services to production with Harness

Onboarding Automation (via Terraform, API or IDP)

Customer has an onboarding automation tool to help users scale to the next set of services

Custom Dashboards

Build Custom Dashboards for use with CD Data. Level 1: Up to 2; Level 2: Up to 4; Level 3: Up to 6

CD RBAC Configuration

Base RBAC for CD Teams is implemented

Deployment Template Configuration and Setup

Customers can deploy with Deployment Templates for non-standard Harness Deployments. Level 2 and 3: Applicable

Reusability of Setup

The Customer gets an Account Setup, Integration Setup, Pipeline Design that is reusable and can handle the new services and teams they onboard

Delegate Setup for CD

• Delegate INIT Script configured; Delegate Upgrade process defined
• High Availability of Delegates; Prod vs Non Prod Access for Delegates

Level 1

1 pipeline migrated to Harness

Level 2

Up to 3 pipelines migrated to Harness

Level 3

Up to 5 pipelines migrated to Harness

Goals / discovery

• Set goals / timelines needed for the migration
• Infrastructure, network access, connectors is setup to run CI builds

Training

• Tutorials and Pre-Implementation Orientation

Build Infrastructure Setup

• Setup infrastructure for self-hosted scenarios
• Codebase connector to clone codebase in CI pipeline

Build & optimize 1st pipeline

• Get the first pipeline running in Harness with all the optimization to make builds faster

Migrate & optimize pipeline #2

• Migrate and optimize pipeline #2 and identify patterns that can be generalized through templates

Governance & Insights

• Create policies and dashboards so the customer can roll out CI pipelines and measure the ROI

Templates

• Create templates based on common patterns identified so customer can rollout CI pipelines

Acceptance and Rollout

• Functional, performance, security testing to ensure effort meets business goals
• No shadow mode for the pipeline migrated to Harness CI
• Developer Satisfaction; Case study for the benefits realized

Level 1

Up to 50 additional CI pipeline(s) are optimized and running in Harness and legacy build tools are sunset

Level 2

Up to 100 additional CI pipeline(s) are optimized and running in Harness and legacy build tools are sunset

Level 3

Up to 150 additional CI pipeline(s) are optimized and running in Harness and legacy build tools are sunset

Goals / discovery

• Migration goals / internal rollout plan (people, process, culture, direction)
• Infrastructure, network access, connectors setup to run CI builds

Training

• Tutorials and Orientation Pre-Implementation
• Migration

Initial rollout

• Onboard 20-30% of engineering teams / developers
• Run Harness & existing CI system in Shadow mode

Acceptance and Initial Rollout

• Business Outcomes results realized; Technical acceptance for functional, performance, security goals
• CSAT Completion; Developer Satisfaction; Case study

Cut over

• Migrate all pipelines (optimize or deprecate)
• Harness CI becomes the primary system; Existing CI system deprecated

Level 1

Up to 2 Schemas; Up to 10 Instances, per Schema; Up to 1 DB Deployment Pipeline

Level 2

Up to 5 Schemas; Up to 10 Instances, per Schema; Up to 1 DB Deployment Pipeline

Level 3

Up to 10 Schemas; Up to 10 Instances, per Schema; Up to 1 DB Deployment Pipeline

Onboard Database Schemas

• Onboarding of in-scope DB Schemas specified by the Customer
• Onboarding of Environments and DB Instance definitions

Pipeline Configuration and Integration Configuration

• Approval gate configuration
• ServiceNow and Jira integration
• Deployment Step Configuration

RBAC Setup for DB DevOps

• User Groups, Users are all mapped to Roles to begin deployment

DB Deployment Infrastructure Setup

• Codebase connector to clone codebase in DB DevOps pipeline

Level 1

Up to 6 additional Schemas; Up to 1 additional DB Deployment Pipeline

Level 2

Up to 15 additional Schemas; Up to 2 additional DB Deployment Pipeline

Level 3

Up to 30 additional Schemas; Up to 3 additional DB Deployment Pipeline

Configure OPA Policies for Pipelines

Users will be able to govern their Deployments via Policies as Code. Level 2: Max 6 Policies; Level 3: Max 8 Policies

Iterate on existing Pipeline Architecture

• Upgrading or extending of existing pipeline architecture
• Additional team onboarding to existing pipelines
• Building net new pipelines where appropriate

Production Readiness

Users are deploying their services to production with Harness

Custom Dashboards

Build Custom Dashboards for use with DB DevOps Data. Level 1: Up to 2; Level 2: Up to 4; Level 3: Up to 6

Reusability of Setup

The Customer gets an Account Setup, Integration Setup, Pipeline Design that is reusable and can handle the new schemas and teams they onboard

Level 1

NOT APPLICABLE

Advanced (Level 2)

• Up to 5 feature flags
• Up to 1 experiment or alert
• Administration set-up: Projects, Environments, Permissions & Approvals
• Up to 2 hours of technical sessions; Up to 4 hours of training and workshops

Advanced Pro (Level 3)

• Up to 5 feature flags; Up to 4 experiments or alerts
• Administration set-up: Projects, Environments, Permissions & Approvals
• Up to 4 hours of technical sessions; Up to 7 hours of training and workshops
• Up to 1 custom playbook

Installation & Integration

• SDK install & validation; Architecture & infrastructure recommendations
• Integrations with third-party tools
• Admin API and webhooks configurations
• Sending events - data flow recommendations & set-up

Feature Flag Migration

• Migration script review
• Migration testing

Operationalize

• SSO/SCIM configuration; Projects & Environments set-up
• Custom targeting option set-up
• Custom configuration of permissions, restrictions & approval flows
• User group configuration; Pilot team onboarding

Implement MVP

• Create feature flags; Test & validate targeting use cases
• Create metrics; Set up experiments; Set up alerts

Enablement

• Feature Flag Foundations & Best Practices; Feature Flag Use Cases
• Measurement & Analysis; Release Monitoring; Experimentation Design; Metrics Set-up

Monthly Advisory

Monthly Advisory Services provides up to four (4) hours a month of continuous configuration and support to assist the Customer in their ongoing adoption journey

Assessment

• Maturity Assessment: Review of the current experimentation program
• Gap Assessment: Identify gaps in process, tools, skills and culture
• Action Plan: Prioritised action plan for improving experimentation effectiveness

End-to-End Experiment Build

• Experiment Design Brief; Create Metrics (foundations, build key/supporting/guardrail metrics)
• Set Up A Feature Flag and experiment dashboard
• QA & Launch; Experiment Analysis

Build Program For scale

• Assess current state vs desired state of maturity
• Establish goals for scaling across leadership, program management, process, knowledge
• High level actions for next 9 months

Advanced SDK Usage

• Review SDK Implementation including Synchronizer, Split Proxy, Redis, Split Evaluator
• Recommendations Document with architectural recommendation diagram

Open Consulting

• Discovery session; Prep Work; Guidance, Training and Recommendations

Level 1

• Up to 10 Workspaces (across 1-2 Projects)
• Up to 1 OPA Policy; Up to 2 Basic Pipelines; Cost Estimation Setup

Level 2

• Up to 50 Workspaces (across 3-5 Projects)
• Up to 2 OPA Policies; Up to 5 Basic Pipelines; Cost Estimation Setup

Level 3

• Up to 100 Workspaces (across 8-10 Projects)
• Up to 3 OPA Policies; Up to 10 Basic Pipelines; Cost Estimation Setup

Infrastructure Dependency Integration

All infrastructure dependencies have been integrated into the provisioning pipeline(s)

State Management

Consolidated state and configuration management within Harness

Basic Infrastructure Provisioning Pipelines

Provision Infrastructure via Harness Pipelines

Change Management Integration

Pipelines integrated with Change Management processes

Delegate Architecture

Establish delegate architecture and build for scale

Level 1

• Up to 40 Workspaces (across 10 Projects)
• Up to 5 OPA Policies; Up to 10 Advanced Pipelines

Level 2

• Up to 80 Workspaces (across 20 Projects)
• Up to 10 OPA Policies; Up to 20 Advanced Pipelines

Level 3

• Up to 150 Workspaces (across 30 Projects)
• Up to 15 OPA Policies; Up to 30 Advanced Pipelines

Infrastructure-as-Code Center of Excellence

Establish a cultural center of excellence for organization-wide IaC practices and reusable solutions

Advanced Infrastructure Provisioning Pipelines

Advanced infrastructure provisioning pipelines, including plugin integrations

State Drift Detection

Drift Detection Schedule enabled and set

Change Management Integration

Pipelines integrated with Change Management processes

Level 2

• Up to 3 OOTB Catalog Plugins
• Onboarding for up to 35 Catalog Components
• Up to 2 Self-Service Workflows
• Up to 6 Catalog Readiness Scorecard Checks
• Up to 2 Custom Data Ingestions with corresponding Maturity Scorecard Checks

Level 3

• Up to 5 OOTB Catalog Plugins
• Up to 75 components onboarded into Software Catalog
• Up to 5 Self-Service Workflows
• Up to 12 Catalog Readiness Scorecard Checks
• Up to 5 Custom Data Ingestion Integration with corresponding Maturity Scorecard Checks

Setup

• Platform Fundamentals: RBAC Persona Configuration, SSO Integration, Secret Management Integration, Setup of Initial Account Structure
• Integrate developer systems with Harness Platform
• Create Systems and Domains to represent hierarchy

Catalog

• Integrate and configure Catalog Plugins
• Define dependencies and relationships between components
• Onboard software components into Software Catalogs
• Create Scorecard for Catalog Readiness
• Complete training for Administrators & End Users

Self-Service

• Create self-service Workflows to support development organization
• Integrate with CI / CD platforms to automate the scale of pipelines
• Integrate with IaC frameworks to automate the scale of environments and application dependencies
• Integrate with Change Management / Issue Tracking software to automate governance and compliance requirements

Monthly Advisory

Monthly Advisory Services provides up to four (4) hours a month of continuous configuration and support to assist the Customer in their ongoing adoption journey

Ongoing Advisory

• Guidance around catalog and workflow configuration and best practice
• Assistance in configuration of currently supported plugins
• Guidance on RBAC adjustments and best practices
• Assistance in configuring scorecard checks
• Guidance around layouts and customizations

Level 1

• Up to 3 OSS or 1 OSS + 1 commercial security scanners integrated into an automation pipeline, including a basic scan governance policy
• For up to 15% of licensed users

Level 2

• Up to 5 OSS or 1 OSS + 3 commercial security scanners integrated into an automation pipeline, including a basic scan governance policy
• For up to 15% of licensed users

Level 3

• Up to 7 OSS or 1 OSS + 5 commercial security scanners integrated into an automation pipeline, including a basic scan governance policy
• For up to 15% of licensed users

Security Scan Infrastructure Implementation

• Prepare Security Scan Hosting Platform
• Prepare any Self-signed Certificate Dependencies
• Deploy Delegate to manage Security Scans
• Create Scanning Infrastructure Connector

STO Pipeline Stage Implementation

• Create STO Pipeline Template; Configure Pipeline Variables, Notifications, Flow Control, Policy Sets
• Create STO Stage Template; Configure Codebase, Infrastructure Tab, Stage Variables, Execution Tab, Security Tests Step
• Run initial tests and configure baselines; Setup automation for vulnerability baselines

Dashboard Implementation

• Configure Dashboard

Basic Pipeline Governance Policy Implementation

• Configure Governance Policy
• Enable AIDA Recommendations
• Develop vulnerability exemption management workflow

Vulnerability Issue Tracking

• Jira Integration
• Slack Integration

Level 1

• STO integrated with developer Pull Request pipelines using up to an additional 3 OSS or 1 OSS/1 Commercial scanners
• For up to 75% of contracted users

Level 2

• STO integrated with developer Pull Request pipelines using up to an additional 5 OSS or 1 OSS/3 Commercial scanners
• For up to 75% of contracted users

Level 3

• STO integrated with developer Pull Request pipelines using up to an additional 7 OSS or 1 OSS/5 Commercial scanners
• For up to 75% of contracted users

Additional Adoption of Security Scan Infrastructure Implementation

• Prepare Security Scan Hosting Platform; Prepare Self-signed Certificate Dependencies
• Deploy Delegate; Create Scanning Infrastructure Connector

Advanced Pipeline Governance Policy Implementation

• Configure Governance Policy
• Enable AIDA Recommendations
• Develop vulnerability exemption management workflow

Vulnerability Issue Tracking

• Jira Integration
• Slack Integration

Level 1

Initial onboarding for up to 2 teams. OOTB Integrations: Jira, Azure Boards, GitHub, GitLab, Bitbucket, Jenkins, Harness, Azure Pipelines, GitHub Actions. SSO & SCIM setup (Okta, Entra ID, OneLogin). Setup Collections for up to 2 teams.

Level 2

Expanded onboarding for up to 10 teams. Same integrations as Level 1. Setup Collections for up to 10 teams.

Level 3

Onboarding for up to 20 teams. Same integrations as Level 1 & 2. Setup Collections for up to 20 teams.

Integrations

• Integration Setup (Out of the Box Integrations)
• Satellite Install: configure, run, and manage the satellite container
• Collaborator Setup; SSO & RBAC Setup

Org Trees

• Hierarchy setup (Asset and People based)
• Centralized Profiles setup

Admin Training

• Integration setup; Keeping collaborator identities up-to-date
• Creating and modifying collections; Creating new Profiles and Workspaces
• Modifying Thresholds; Customization of Dashboards; Widget Walkthrough

Monthly Advisory

Monthly Advisory Services provides up to four (4) hours a month of continuous configuration and support to assist the Customer in their ongoing adoption journey

Ongoing Advisory

• Guidance for onboarding new teams as your organization grows
• Maintain and adjust RBAC as roles and structures evolve
• Guidance for configuration changes in response to organizational restructuring or tool shifts
• Support the expansion of Collections; Walkthrough of ongoing product capabilities

Level 1

• Up to 100 SBOMs for built artifacts or repositories including different versions across pipelines with 3 OPA policies for enforcement

Level 2

• Up to 250 SBOMs for built artifacts or repositories including different versions across pipelines with 5 OPA policies for enforcement

Level 3

• Up to 500 SBOMs for built artifacts or repositories including different versions across pipelines with 10 OPA policies for enforcement

Setup

• Pipeline Creation with git connectors
• Setting up codebase and building artifact in CI
• Setup Deployment Stage and Configuration

SBOM Generation

• Include SBOM Orchestration Step in Build Stage
• Configure Attestation with Public & Private Key
• Download SBOM and Verify Attestation in Artifact Registry

SBOM Enforcement

• Create SBOM OPA policies to block components
• Enforce governance in Deploy stage using SBOM Enforcement Step

Artifact View

• View components used in building artifacts
• Understand licenses used along with supplier details

Level 1

• Up to 100 SBOMs with 3 OPA policies for enforcement with SLSA Level 2 provenance validation for built artifacts on Harness Hosted Builds

Level 2

• Up to 250 SBOMs with 5 OPA policies for enforcement with SLSA Level 2 provenance validation

Level 3

• Up to 500 SBOMs with 10 OPA policies for enforcement with SLSA Level 2 provenance validation

Setup

• Pipeline Creation with git connectors
• Setting up codebase and building artifact in build stage
• Setup deployment stage and configuration

SBOM Generation

• Include SBOM Orchestration Step in Build Stage
• Configure Attestation with Public & Private Key
• Download SBOM and Verify Attestation in Artifact Registry

SBOM Enforcement

• Create SBOM OPA policies to block components
• Enforce governance in Deploy stage using SBOM Enforcement Step

Artifact View

• View components used in building artifacts
• View licenses used along with supplier details

SLSA Enforcement

• Enforce SLSA Verification Step in Deployment
• Setup OPA policies needed to ensure artifact integrity
• Validate provenance by checking build system attributes such as users, branch etc.

Remediation Tracker

• Create remediation trackers to block components containing zero day vulnerabilities
• Assign tickets to developers and track remediation status in deployed environments