2020 July 22 Tech Committee Meeting notes

5m

Agenda and action item review

Recreating docker certificates

• constantly having issues with expired docker certificates

  • currently found an easy solution to re-create the certs using docker machine.

  • however this has an issue with the Terraform + Ansible IaC.

  • And using the IaC removes and re-creates the AWS resources

  • To note:  this will happen in COVID instances eventually (about a year)

    • In demo-v3 we've upped it to 3 years

• Alternatives / solutions:

  • Don't use a Docker client connection for updating and managing docker images and containers

    • Like PCMT:  https://gitlab.com/pcmt/pcmt/-/blob/master/deploy/ansible/tasks/pim.yml

    • Would get rid of:  https://github.com/OpenLMIS/openlmis-deployment/blob/master/provision/ansible/roles/docker/tasks/gen-tls-files.yml

  • Make the Ansible script more mature such that it's able to create a new cert, re-uploaded to AWS S3

    • You'd still have to go to Jenkins to update with the new cert

• For now we'd prefer to use 3 years for new environments, and longer term we'd like to look at switching over to a pattern like PCMT's.

Performance Testing

We said in 2 weeks we'd put more people on it...  Did we?

• The prediction from last meeting didn't quite come true, we have more implementation work and the work has shifted to stock management offline.

• So far no one has started on this.

• For now the Product Committee call has prioritized stock management offline over this

AOB