In hours: - Comms: -

Out of hours: Mohamed Deerow Comms: Jenny Sleeman

Escalations: Ossie Lundie-Smith

---

Doing (8)

Collect information and references to inform the live assessment

• Paul Dougan
• Sebastian Schmieschek

12 days

Analyse support ticket data

• Sebastian Schmieschek
• clarebarnett

8 days

Buildpack Upgrade

• Mohamed Deerow

NEW

File upstream issue about cell's ephemeral disk filling up over time

• Sebastian Schmieschek

6 days

Migrate paas-billing database from Postgres 9.5 to Postgres 12.x

3 days

Implement google analytics and a cookie consent mechanism on product pages

• Jani Kraner

2 days

Spike - investigate how many tenants impacted by RDS overcharging bug

• dave povey

2 days

Setup new support email address on our branded domain

• Mohamed Deerow

2 days

---

Next

Update VPC peering terraform [had to be reverted]

NEW

Draft and send a letter alerting our tenants about RDS Postgres 9.5 EOL and come up with communication plan.

NEW

Migrate paas-accounts database from Postgres 9.5 to Postgres 12.x

3 days

Migrate CDN Broker internal database from Postgres 9.5 to Postgres 12.x

3 days

Leaver - Emily

2 days

Leaver - Maxim

NEW

Set up basic WAF rules

3 days

Set up WAF And Shields CloudWatch alarms

3 days

Setup DDoS Response Team Alerting

3 days

Give the AWS DDoS Response Team (DRT) IAM permissions

3 days

SPIKE: improve how we keep an eye on platform health

3 days

Scale Traffic Controller instances

3 days

Spike - investigate why billing is so slow

3 days

Remove Elasticsearch version 6 from our offering

• Andy Hunt

5 days

Spike to obtain Cost Explorer data for non-S3 resources

• dave povey

9 days

We need to decide on follow up action(s) we might need to take with billing our tenants.

13 days

SPIKE: What data do we want to collect with Google Analytics and how

13 days

Write access needs testing discussion guide

21 days

Setup new email address for Mailchimp

27 days

Opt-in consent option (Mailchimp)

• Rafal Proszowski
• Miki Mokrysz
• clarebarnett

27 days

Model the costs and benefits of our two use cases

33 days

Create draft documentation for Secrets user testing

36 days

Set up mailchimp and manage tenant email addresses

• clarebarnett

43 days

SPIKE: API Tokens

60 days

Dynamic billing scoping

68 days

Support CCS architecture capability assessment of GOV.UK PaaS for the SCALE programme

• Paul Dougan

107 days

[SPIKE] Configure HTTP Desync mitigation

74 days

Redesign the surveys we send to tenants

• clarebarnett

102 days

Run user testing of secrets scenarios

75 days

Adding a read-only user to mysql database of RDS Broker when binding an app to a service instance.

84 days

Update our RDS broker MySQL documentation to include the new feature of binding the service instance to an app with a read-only user.

84 days

User activity alerts

134 days

AWS Splunk alerts

134 days

Notify db work

174 days

Separate InfluxDB into different Aiven project(s) from Elasticsearch

• Andy Hunt

160 days

Fix CF conduit apps not being deleted

174 days

Trigger optional Aiven updates

172 days

Add maintenance window to the Aiven broker

172 days

Alert when passwords, secrets or keys are being logged in Logit

172 days

Expose "change password" functionality in paas-admin

172 days

Add auto-refresh on pazmin metrics

174 days

allow tenants to control the RDS database backup retention period

182 days

Add some guidance to our runbooks about how to download data from Elasticsearch in Logit and guidance on asking Cyber to pair with us in incident process ithc

209 days

Vulnerability improvement for PaaS admin

209 days

[WIP] Check we are protected against HTTP request smuggling

182 days

Iterating backlog refinement

• jennifersleeman

159 days

Add PutObjectAcl and GetObjectAcl to aws-s3-bucket service permissions

313 days

MVP for billing

• dave povey

181 days

Make Concourse automatically apply changes to paas-trusted-people

175 days

Change CDN broker to paid only

287 days

---

Docs stories

Tech docs - Backing service metrics - Misc updates

272 days

Add a section on app events to the tech docs

279 days

Tech Docs / Product Page - Write case studies to demonstrate cost of PaaS

289 days

Tech Docs - Content Audit - How GOV.UK PaaS meets the GDS Standards Assurance Process

286 days

Tech Docs / Product Page - Key concepts information

284 days

Tech Docs - Content Audit - Information on what skills your team needs to use the GOV.UK PaaS successfully

286 days

Responsibility model - Expand content to plug gaps

293 days

Tech Docs - Doc-a-thon - Guidance

329 days

Tech Docs - Doc-a-thon - Deploying apps - 12 factor app principles

329 days

Tech Docs - Content Audit - improve cross linking with tech docs

293 days

Tech Docs - Doc-a-thon - Deploying apps - Public apps

293 days

Tech Docs - Doc-a-thon - Deploying apps - Buildpacks

293 days

Tech Docs - Doc-a-thon - Guidance - Penetration testing

293 days

Content audit: User-provided route services

293 days

Content audit: Troubleshooting

293 days

Content audit: Guidance

293 days

Content audit: App restarts

293 days

Content audit: Quotas

293 days

Content audit: Managing custom domains using cdn-route service

293 days

Content audit: Deploy a Java app

293 days

Content audit: Deploy a Django app

293 days

Content audit: Deploy a Node.js app

293 days

Content audit: Deploy a Ruby on Rails app

293 days

Content audit: Excluding files

293 days

Content audit: Secure and non-secure requests

293 days

Content audit: Data Security Classification

293 days

Reviewing (5 / 4)

Leaver: Richard Towers

3 days

Write an explanation of diagrams on working practices

• Sebastian Schmieschek
• clairemcnally

NEW

Plan research for "Understand what PaaS is and how it works"

• clarebarnett

NEW

Change *deploy-healthcheck* task in `create-cloudfoundry/post-deploy` job to use Postgres 12.x database instead of Postgres 9.5.

NEW

Add ADR to document giving AWS access for DDoS Response Team

2 days

Approving (2/5)

Leaver: tlwr

NEW

SPIKE - estimate the effort needed to fix the overcharging RDS storage bug.

• dave povey

5 days

---

Done (5)

Create a list of RDS Postgres 9.5 databases used by our GOV.UK PaaS.

NEW

Address Cloud Foundry CVEs from November 20th

NEW

Create the smallest possible Redis cache plan

2 days

Add Postgres 12 plans

3 days

SPIKE: Come up with plan for Postgres 9.5 deprecation

4 days