diff --git a/source/documentation/adrs/000-record-architecture-decisions.html.md.erb b/source/documentation/adrs/000-record-architecture-decisions.html.md.erb index 6cbb8bf..c74b123 100644 --- a/source/documentation/adrs/000-record-architecture-decisions.html.md.erb +++ b/source/documentation/adrs/000-record-architecture-decisions.html.md.erb @@ -1,7 +1,7 @@ --- owner_slack: "#nvvs-devops" title: 000 - Record architecture decisions -last_reviewed_on: 2023-04-11 +last_reviewed_on: 2023-10-05 review_in: 3 months --- diff --git a/source/documentation/general-information/our-sprints.html.md.erb b/source/documentation/general-information/our-sprints.html.md.erb index 6d6c8a2..a48b5de 100644 --- a/source/documentation/general-information/our-sprints.html.md.erb +++ b/source/documentation/general-information/our-sprints.html.md.erb @@ -1,8 +1,8 @@ --- owner_slack: "#nvvs-devops" title: Past Sprints -last_reviewed_on: 2023-06-21 -review_in: 2 weeks +last_reviewed_on: 2023-10-05 +review_in: 1 year --- # <%= current_page.data.title %> @@ -13,139 +13,139 @@ As mentioned in [Sprint planning](our-ceremonies.html#sprint-planning), we work | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Sprint goal goes here | -| **Sprint Result** | Completed (or not!) | -| **Additional Outcomes** | Outcomes go here
Separated by `
` tags
To make them a list | +| **Sprint Goals** | Sprint goal goes here | +| **Sprint Result** | Completed (or not!) | +| **Additional Outcomes** | Outcomes go here
Separated by `
` tags
To make them a list | | | | ## Sprints 2022
-### 16/03/2022 - 29/03/2022 +### 16/03/2022 - 29/03/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Complete migration from Jira to Zenhub | -| **Sprint Result** | Completed | -| **Additional Outcomes** | Outcomes go here
Separated by `
` tags
To make them a list | +| **Sprint Goals** | Complete migration from Jira to Zenhub | +| **Sprint Result** | Completed | +| **Additional Outcomes** | Outcomes go here
Separated by `
` tags
To make them a list | | | | -### 30/03/2022 - 12/04/2022 +### 30/03/2022 - 12/04/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Refactor ways of working and ceremonies around new software (Zenhub) | -| **Sprint Result** | Complete | -| **Additional Outcomes** | Thanos reciever able to recieve metrics over HTTPS
Several ADRs completed | +| **Sprint Goals** | Refactor ways of working and ceremonies around new software (Zenhub) | +| **Sprint Result** | Complete | +| **Additional Outcomes** | Thanos reciever able to recieve metrics over HTTPS
Several ADRs completed | | | | -### 13/04/2022 - 26/04/2022 +### 13/04/2022 - 26/04/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | No Goal | -| **Sprint Result** | N/A | -| **Additional Outcomes** | Lots of AWS Trusted Advisor alerts fixed
Lots of dependancy updates and maintenance catch up completed | +| **Sprint Goals** | No Goal | +| **Sprint Result** | N/A | +| **Additional Outcomes** | Lots of AWS Trusted Advisor alerts fixed
Lots of dependancy updates and maintenance catch up completed | | | | -### 27/04/2022 - 10/05/2022 +### 27/04/2022 - 10/05/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Ensure PKI Infrastructure has Monitoring & Alerting configured
Complete all Terraform upgrades | -| **Sprint Result** | Completed | -| **Additional Outcomes** | Automating PR labelling with Github Actions
[Daniel the Manual Spaniel](https://github.com/ministryofjustice/tech-docs-monitor) | +| **Sprint Goals** | Ensure PKI Infrastructure has Monitoring & Alerting configured
Complete all Terraform upgrades | +| **Sprint Result** | Completed | +| **Additional Outcomes** | Automating PR labelling with Github Actions
[Daniel the Manual Spaniel](https://github.com/ministryofjustice/tech-docs-monitor) | | | | -### 11/05/2022 - 24/05/2022 +### 11/05/2022 - 24/05/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Automate and inegrate actions, "Let the machines do the talking"! | -| **Sprint Result** | Completed | -| **Additional Outcomes** | VPC CNI version upgraded
AWS Shield Advanced rolled out to pre-prod | +| **Sprint Goals** | Automate and inegrate actions, "Let the machines do the talking"! | +| **Sprint Result** | Completed | +| **Additional Outcomes** | VPC CNI version upgraded
AWS Shield Advanced rolled out to pre-prod | | | | -### 25/05/2022 - 07/06/2022 +### 25/05/2022 - 07/06/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Deploy DHCP option 234 to Dev/Pre-Production | -| **Sprint Result** | Not Completed - Feature is completed and testing with EUC team must be arranged before pushing through to pre-prod | -| **Additional Outcomes** | Github teams as code | +| **Sprint Goals** | Deploy DHCP option 234 to Dev/Pre-Production | +| **Sprint Result** | Not Completed - Feature is completed and testing with EUC team must be arranged before pushing through to pre-prod | +| **Additional Outcomes** | Github teams as code | | | | -### 08/06/2022 - 21/06/2022 +### 08/06/2022 - 21/06/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Complete outstanding spikes (EKS, PagerDuty & Github Actions CI) | -| **Sprint Result** | Completed all Spikes | -| **Additional Outcomes** | Kea upgrade to 2.0.2, DHCP Option 234 | +| **Sprint Goals** | Complete outstanding spikes (EKS, PagerDuty & Github Actions CI) | +| **Sprint Result** | Completed all Spikes | +| **Additional Outcomes** | Kea upgrade to 2.0.2, DHCP Option 234 | | | | -### 22/06/2022 - 05/07/2022 +### 22/06/2022 - 05/07/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Improve management of DHCP service by implementing search and alerting on subnet capacity. | -| **Sprint Result** | Completed | -| **Additional Outcomes** | DHCP Option 234 feature now availabe on production. NACS live on first site. | +| **Sprint Goals** | Improve management of DHCP service by implementing search and alerting on subnet capacity. | +| **Sprint Result** | Completed | +| **Additional Outcomes** | DHCP Option 234 feature now availabe on production. NACS live on first site. | | | | -### 06/07/2022 - 19/07/2022 +### 06/07/2022 - 19/07/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Our focus is on improving the visibility of IMAP We believe it delivers greater visibility to us and SNOW to improve trust in our monitoring. This will be confirmed when we can validate an alert can enter SNOW. | -| **Sprint Result** | Completed | -| **Additional Outcomes** | @cloudopsbot incident functionality - started pagerduty development - 2 NACS features; policy priority and grafana links for ease of use | +| **Sprint Goals** | Our focus is on improving the visibility of IMAP We believe it delivers greater visibility to us and SNOW to improve trust in our monitoring. This will be confirmed when we can validate an alert can enter SNOW. | +| **Sprint Result** | Completed | +| **Additional Outcomes** | @cloudopsbot incident functionality - started pagerduty development - 2 NACS features; policy priority and grafana links for ease of use | | | | -### 20/07/2022 - 02/08/2022 +### 20/07/2022 - 02/08/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Everything EKS: migrate, one cluster, upgrade, monitor. (Reduce complexity and cost, easier maintainability, automate dependency checks). Stretch Goal: Stretch: Ensure all team members have the same access to enable better working practices | -| **Sprint Result** | Completed | -| **Additional Outcomes** | Fixed JSON Exporter | +| **Sprint Goals** | Everything EKS: migrate, one cluster, upgrade, monitor. (Reduce complexity and cost, easier maintainability, automate dependency checks). Stretch Goal: Stretch: Ensure all team members have the same access to enable better working practices | +| **Sprint Result** | Completed | +| **Additional Outcomes** | Fixed JSON Exporter | | | | -### 03/08/2022 - 16/08/2022 +### 03/08/2022 - 16/08/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | 🧹 Complete 1 or 2 point tickets amounting to 15 total points. Stretch Goal: Stretch: Improve security posture by completing all dependency upgrades. | -| **Sprint Result** | Not completed, couple of tickets carried over to the next sprint | -| **Additional Outcomes** | NACS Rollout going successfully. | +| **Sprint Goals** | 🧹 Complete 1 or 2 point tickets amounting to 15 total points. Stretch Goal: Stretch: Improve security posture by completing all dependency upgrades. | +| **Sprint Result** | Not completed, couple of tickets carried over to the next sprint | +| **Additional Outcomes** | NACS Rollout going successfully. | | | | -### 17/08/2022 - 30/08/2022 +### 17/08/2022 - 30/08/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Save money by completing the migration of all IMA resources to the EKS cluster. Stretch Goal: Complete SMTP Spike for Print Recompete. | -| **Sprint Result** | Not Completed, carried over to next sprint. | -| **Additional Outcomes** | NACS rollout continuing to progress successfully. +| **Sprint Goals** | Save money by completing the migration of all IMA resources to the EKS cluster. Stretch Goal: Complete SMTP Spike for Print Recompete. | +| **Sprint Result** | Not Completed, carried over to next sprint. | +| **Additional Outcomes** | NACS rollout continuing to progress successfully. | | | -### 31/08/2022 - 13/09/2022 +### 31/08/2022 - 13/09/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Save money by completing the migration of all IMA resources to the EKS cluster. Stretch Goal: Complete SMTP Spike for Print Recompete. | -| **Sprint Result** | Not Completed, carried over to next sprint. | -| **Additional Outcomes** | | +| **Sprint Goals** | Save money by completing the migration of all IMA resources to the EKS cluster. Stretch Goal: Complete SMTP Spike for Print Recompete. | +| **Sprint Result** | Not Completed, carried over to next sprint. | +| **Additional Outcomes** | | | | | -### 14/09/2022 - 27/09/2022 +### 14/09/2022 - 27/09/2022 | | | | ---------------------------- | --------------------------- | -| **Sprint Goals** | Monitoring cluster v2 is ready for user testing. Stretch Goal: Complete SMTP Spike for Print Recompete. | -| **Sprint Result** | Completed, outstanding tasks noted in repository. | -| **Additional Outcomes** | | +| **Sprint Goals** | Monitoring cluster v2 is ready for user testing. Stretch Goal: Complete SMTP Spike for Print Recompete. | +| **Sprint Result** | Completed, outstanding tasks noted in repository. | +| **Additional Outcomes** | | | | | ### 28/09/2022 - 11/10/2022 @@ -164,7 +164,7 @@ As mentioned in [Sprint planning](our-ceremonies.html#sprint-planning), we work | **Sprint Goals** | Complete as many 1 - 2 point tickets from in development as possible (30 points total). Stretch Goal: Complete 50% of the in progress dependabot tickets.| | **Sprint Result** | | | **Additional Outcomes** | | -| +| ### 26/10/2022 - 8/11/2022 @@ -173,122 +173,122 @@ As mentioned in [Sprint planning](our-ceremonies.html#sprint-planning), we work | **Sprint Goals** | Complete all outstanding "Todo" items and 50% (18) of the in progress dependabot tickets.| | **Sprint Result** | Completed 50% of dependabots that were in progress (18) however did not clear the to do column.| | **Additional Outcomes** | | -| +| ### 9/11/2022 - 22/11/2022 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Complete rebranding to provide a consistent view of the the team.| -| **Sprint Result** | Complete | +| **Sprint Result** | Complete | | **Additional Outcomes** | | -| +| ### 23/11/2022 - 7/12/2022 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Our focus is on delivering a complete monitoring solution, this will be achieved when a test deployment of dev and prep is completed and all dashboards are functional.| -| **Sprint Result** | | +| **Sprint Result** | | | **Additional Outcomes** | | -| +| ### 08/12/2023 - 21/12/2022 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Partial Firebreak and cleanup | -| **Sprint Result** | | +| **Sprint Result** | | | **Additional Outcomes** | | -| +| ### 21/12/2023 - 03/01/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | 🔥 Firebreak 🔥 | -| **Sprint Result** | We learnt lots of cool stuff! | +| **Sprint Result** | We learnt lots of cool stuff! | | **Additional Outcomes** | | -| +| ### 04/01/2023 - 17/01/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | New Year, New Passwords. Update passwords used by docker ecr images. Stretch Goal - Update DHCP Alpine image | -| **Sprint Result** | Completed | +| **Sprint Result** | Completed | | **Additional Outcomes** | | -| +| ### 18/01/2023 - 31/01/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Upgrade PagerDuty Slack integration. Stretch - Improve security posture by completing trusted advisor tickets. | -| **Sprint Result** | Completed | +| **Sprint Result** | Completed | | **Additional Outcomes** | | -| +| ### 01/02/2023 - 14/02/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Last Pass password rotation. Stretch - Investigate DNS , TCP, UDP and complete remaining trusted advisor ticket. | -| **Sprint Result** | Completed | +| **Sprint Result** | Completed | | **Additional Outcomes** | | -| +| ### 15/02/2023 - 28/02/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | | -| **Sprint Result** | | +| **Sprint Result** | | | **Additional Outcomes** | | -| +| ### 01/03/2023 - 14/03/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Complete handover of DHCP Admin Portal Tasks. Stretch Goal: Complete DNS & NACS Spikes (generate tickets to do the work). | -| **Sprint Result** | Completed | +| **Sprint Result** | Completed | | **Additional Outcomes** | | -| +| ### 15/03/2023 - 28/03/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Review NACS Monitoring / Alerting Configuration. Stretch - Upgrade EKS Cluster | -| **Sprint Result** | Completed | +| **Sprint Result** | Completed | | **Additional Outcomes** | | -| +| ### 29/03/2023 - 12/04/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Finish off NACs slack notification - Stretch goal to compete Alerts for Wired devices | -| **Sprint Result** | Completed | +| **Sprint Result** | Completed | | **Additional Outcomes** | | -| +| ### 13/04/2023 - 25/04/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | NACs Spike for wired devices and Review NACs documentation | -| **Sprint Result** | Completed | +| **Sprint Result** | Completed | | **Additional Outcomes** | | -| +| ### 26/04/2023 - 10/05/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Finish off NACs slack notification | -| **Sprint Result** | Completed | +| **Sprint Result** | Completed | | **Additional Outcomes** | Complete alerts for wired devices| | @@ -297,9 +297,9 @@ As mentioned in [Sprint planning](our-ceremonies.html#sprint-planning), we work | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Implement NACS logging enhancement and provide overview sessions| -| **Sprint Result** | Completed| +| **Sprint Result** | Completed| | **Additional Outcomes** | Review Github documentation repos ensuring they are up to date| -| +| ### 25/05/2023 - 07/06/2023 | | | @@ -310,16 +310,14 @@ NACS DHCP/DNS Grafana SMTP| -| **Sprint Result** | Partially Completed| +| **Sprint Result** | Partially Completed| | **Additional Outcomes** | | -| +| ### 08/06/2023 - 21/06/2023 | | | | ---------------------------- | --------------------------- | | **Sprint Goals** | Complete Github version 2 source action upgrade on all pipelines| -| **Sprint Result** | | +| **Sprint Result** | | | **Additional Outcomes** | | -| - - +| diff --git a/source/documentation/products/product-monitoring-alerting.html.md.erb b/source/documentation/products/product-monitoring-alerting.html.md.erb index 2ed965e..43ae053 100644 --- a/source/documentation/products/product-monitoring-alerting.html.md.erb +++ b/source/documentation/products/product-monitoring-alerting.html.md.erb @@ -1,7 +1,7 @@ --- owner_slack: "#nvvs-devops" title: Monitoring and alerting guide -last_reviewed_on: 2023-04-11 +last_reviewed_on: 2023-10-05 review_in: 3 months --- @@ -29,9 +29,9 @@ To view the grafana dashboards below, you will need the following. | [SMTP Relay](https://github.com/ministryofjustice/staff-infrastructure-smtp-relay-server#readme) | [Simple Mail Transort Protocol Relay](https://monitoring-alerting.staff.service.justice.gov.uk/d/h36Havfik/) | [#mojo-staff-infrastructure-smtp-alerts](https://mojdt.slack.com/archives/C02EN7GNDNF) | ## Other Monitoring Dashboards and Alerts - Service | Grafana dashboards | Slack alert channel - --- | --- | --- - Certificate Expiry | [Certificate Expiry and HTTP Respone Dashboard](https://monitoring-alerting.staff.service.justice.gov.uk/d/xtkCtBkizsdsdf/) | [#mojo-staff-certificate-services-alerts](https://mojdt.slack.com/archives/C01FEFGC1GS) + Service | Grafana dashboards | Slack alert channel + --- | --- | --- + Certificate Expiry | [Certificate Expiry and HTTP Respone Dashboard](https://monitoring-alerting.staff.service.justice.gov.uk/d/xtkCtBkizsdsdf/) | [#mojo-staff-certificate-services-alerts](https://mojdt.slack.com/archives/C01FEFGC1GS) Internet Gateway Service | [SNMP Interface Detail](https://monitoring-alerting.staff.service.justice.gov.uk/d/Fi96pMWGk/snmp-interface-detail?orgId=1&refresh=30m) | [#mojo-network-alerts](https://mojdt.slack.com/archives/CP30T2WPJ) PSN Lumen | [PSN Lumen Alerting](https://monitoring-alerting.staff.service.justice.gov.uk/d/z-UwqJyMz/) | [#mojo-network-alerts](https://mojdt.slack.com/archives/CP30T2WPJ) SOP | [SOP OCI Infrastructure](https://monitoring-alerting.staff.service.justice.gov.uk/d/PRbM0ZJGk/) | [#mojo-network-alerts](https://mojdt.slack.com/archives/CP30T2WPJ) diff --git a/source/documentation/team-guide/team-onboarding-checklist.html.md.erb b/source/documentation/team-guide/team-onboarding-checklist.html.md.erb index ae1eb45..54743e5 100644 --- a/source/documentation/team-guide/team-onboarding-checklist.html.md.erb +++ b/source/documentation/team-guide/team-onboarding-checklist.html.md.erb @@ -1,7 +1,7 @@ --- owner_slack: "#nvvs-devops" title: Onboarding Checklist -last_reviewed_on: 2023-05-18 +last_reviewed_on: 2023-10-06 review_in: 3 months --- # <%= current_page.data.title %> @@ -12,7 +12,7 @@ The intended readership of this page is new joiners to the team and the hiring M Request following items: -- Developer laptop +- Developer laptop - User account(@justice.gov.uk) @@ -22,7 +22,7 @@ Request following items: #### Step - 2 (Line Manager) -- Send instrcutions on how to obtain password from support desk via personal email before the start date. +- Send instructions on how to obtain password from support desk via personal email before the start date. - Arrange a call to kick-off onboarding process with the new joiner on the start date @@ -53,10 +53,20 @@ Request access to the following : - Sentry.io -- Slack Channel +- Slack Channel - Service Now - Confluence -- PasswordManager (1Password) +- PasswordManager (1Password) with access to the `Common Technology Services` vault. + +- Account Associations: + + - User account(@justice.gov.uk): Associate with the group email
+ `cloud-operations-notifications@justice.gov.uk`
. + + - Gmail account(@digital.justice.gov.uk): Associate with the group email
+ `lanwifi-devops@digital.justice.gov.uk`
. + + - Github: Add Github account to the `nvvs-devops-admins` GitHub Team [here](https://github.com/ministryofjustice/staff-technology-services-github-teams) diff --git a/source/runbooks/creating-github-pat.html.md.erb b/source/runbooks/creating-github-pat.html.md.erb index 89b37d2..f24d5f1 100644 --- a/source/runbooks/creating-github-pat.html.md.erb +++ b/source/runbooks/creating-github-pat.html.md.erb @@ -1,7 +1,7 @@ --- owner_slack: "#nvvs-devops" title: Creating a GitHub PAT -last_reviewed_on: 2023-02-08 +last_reviewed_on: 2023-10-05 review_in: 6 months --- # Generating a GitHub Personal Access Token @@ -17,8 +17,8 @@ We use a service GitHub account to create `personal access tokens`. > **Note:** > Use an `incognito` browser session to generate token to be sure not to create in your own account. -Open the lastpass vault and search for [staff-infrastructure-moj](https://github.com/staff-infrastructure-moj). -Open a new incognito browser session and copy the user, password then create a one time password using the code in the secure notes on the GitHub challenge. +Open the 1Password vault and search for [staff-infrastructure-moj](https://github.com/staff-infrastructure-moj). +Open a new incognito browser session and copy the user, password then create a one time password using the code in the secure notes on the GitHub challenge. ## Creating a PAT > **Warning:**