2020 July 22 Tech Committee Meeting notes

• constantly having issues with expired docker certificates
  
  • currently found an easy solution to re-create the certs using docker machine.
  • however this has an issue with the Terraform + Ansible IaC.
  • And using the IaC removes and re-creates the AWS resources
  • To note:  this will happen in COVID instances eventually (about a year)
    • In demo-v3 we've upped it to 3 years
• Alternatives / solutions:
  • Don't use a Docker client connection for updating and managing docker images and containers
    • Like PCMT:  https://gitlab.com/pcmt/pcmt/-/blob/master/deploy/ansible/tasks/pim.yml
    • Would get rid of:  https://github.com/OpenLMIS/openlmis-deployment/blob/master/provision/ansible/roles/docker/tasks/gen-tls-files.yml
  • Make the Ansible script more mature such that it's able to create a new cert, re-uploaded to AWS S3
    • You'd still have to go to Jenkins to update with the new cert
• For now we'd prefer to use 3 years for new environments, and longer term we'd like to look at switching over to a pattern like PCMT's.

We said in 2 weeks we'd put more people on it...  Did we?

• The prediction from last meeting didn't quite come true, we have more implementation work and the work has shifted to stock management offline.
• So far no one has started on this.
• For now the Product Committee call has prioritized stock management offline over this