> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pastures.farm/llms.txt
> Use this file to discover all available pages before exploring further.

# Operations

> Upgrade risk assessment, CIS benchmarks, monitoring, etcd backup, support bundles, and audit logging.

The Operations page groups six operational tools into a tabbed interface. Each tab addresses a distinct cluster management workflow.

## Tabs

<Tabs>
  <Tab title="Upgrade Risk">
    ### Pre-flight upgrade checks

    Run a pre-flight assessment before upgrading your cluster. The tool evaluates addon compatibility, API deprecations, and known upgrade issues for the target version.

    Results include an overall **risk level** (low / medium / high) with itemized findings.

    **Engine endpoint:** `POST /api/clusters/{id}/upgrade-risk`
  </Tab>

  <Tab title="CIS Benchmark">
    ### Security compliance scanning

    Run CIS Kubernetes Benchmark scans against the selected cluster. Results are categorized as **pass**, **fail**, or **warn** with the specific benchmark ID and remediation guidance.

    **Engine endpoint:** `POST /api/cis/scan`
  </Tab>

  <Tab title="Monitoring">
    ### Prometheus & Grafana integration

    View Prometheus alert status, query metrics, and correlate alerts with cluster issues. Integrates with existing `rancher-monitoring` (Prometheus Operator) installations.

    Alert correlation links firing alerts to relevant Pastures advisories.

    **Engine endpoints:** `GET /api/monitoring/*`
  </Tab>

  <Tab title="etcd Backup">
    ### Snapshot management

    List existing etcd snapshots, trigger on-demand backups, and manage retention policies. Supports both local and S3-compatible backup targets.

    **Engine endpoints:** `GET /api/etcd/*`, `POST /api/etcd/*`
  </Tab>

  <Tab title="Support Bundle">
    ### Diagnostic bundle generation

    Generate a comprehensive support bundle containing logs, resource state, and cluster configuration for troubleshooting or support ticket submission.

    **Engine endpoint:** `POST /api/support-bundle`
  </Tab>

  <Tab title="Audit Log">
    ### Immutable action log

    Browse an append-only audit log of administrative actions. Each entry is integrity-protected with **SHA-256 hashing** and supports integration with the Kubernetes audit pipeline.

    The log captures who performed an action, what changed, and when — with tamper-evident chaining.

    **Engine endpoints:** `GET /api/audit/*`
  </Tab>
</Tabs>

<Info>
  In demo mode, each tab displays synthetic data. Connect a Pastures Engine for live operational data.
</Info>