In hours: - Comms: -

Out of hours: Lee Porte Comms: Jani Kraner

Escalations: Erin Robinson

---

Doing (11)

Write out the steps shown in auditing content diagram (accessibility)

• Sebastian Schmieschek
• clairemcnally

3 days

Analyse support ticket data

• Paul Dougan
• clarebarnett

43 days

Prevent tenants being affected by the RDS billing bug when they upgrade from postgres 9.5

• dave povey

6 days

Conduct understanding GOV.UK PaaS research sessions

• clarebarnett
• laurayoung1

6 days

Analyse Understanding GOV.UK PaaS research

• clarebarnett
• laurayoung1

6 days

Prep for Community Show & Tell - January 2021

• Paul Dougan
• markpeterbuckley

6 days

Setup DDoS Response Team Alerting

• Mohamed Deerow

5 days

Live assessment deck - Technology

• Lee Porte
• Paul Dougan

4 days

Live assessment deck - Design

• Jani Kraner

3 days

Change default github branches to main

• Lee Porte

NEW

Agree a new set of tags for our zendesk tickets

• Paul Dougan

NEW

---

Next

Create parallel billing database/envt

2 days

SPIKE: How do we store performance data

6 days

Quantify overcharges/undercharges in RDS

• dave povey

6 days

Buildpack upgrade Jan 2021

7 days

Send email via Notify to affected Postgres 9.5 users

6 days

Collect information and references to inform the live assessment

• Paul Dougan
• jennifersleeman
• Sebastian Schmieschek

13 days

Verify existing billing figures

26 days

Investigate historical RDS overcharge for tenants

30 days

Live assessment deck - Demo of user journey

• Paul Dougan

6 days

Live assessment deck - Show and Tell, Performance and Next Steps

• Sebastian Schmieschek
• markpeterbuckley

6 days

Live assessment deck - Team

• jennifersleeman

6 days

Live assessment deck - User research

• clarebarnett

6 days

Create a materialised view of billing data for use in adoption/usage dashboard

2 days

Add a private dashboard for internal use

2 days

Create a dashboard to publish performance data

2 days

Give the AWS DDoS Response Team (DRT) IAM permissions

38 days

Upgrade CF to a version >= 15.5.0

6 days

SPIKE: improve how we keep an eye on platform health

38 days

Scale Traffic Controller instances

38 days

Spike - investigate why billing is so slow

38 days

Normalise Postgres 10,11,12 plans

7 days

Swap Concourse file system to Overlayfs

7 days

Remove Elasticsearch version 6 from our offering

• Andy Hunt

40 days

Spike to obtain Cost Explorer data for non-S3 resources

• dave povey

44 days

We need to decide on follow up action(s) we might need to take with billing our tenants.

48 days

SPIKE: What data do we want to collect with Google Analytics and how

48 days

Write access needs testing discussion guide

56 days

Setup new email address for Mailchimp

62 days

Opt-in consent option (Mailchimp)

• Rafal Proszowski
• Miki Mokrysz
• clarebarnett

62 days

Model the costs and benefits of our two use cases

68 days

Create draft documentation for Secrets user testing

71 days

Set up mailchimp and manage tenant email addresses

• clarebarnett

78 days

SPIKE: API Tokens

95 days

Dynamic billing scoping

103 days

[SPIKE] Configure HTTP Desync mitigation

109 days

Redesign the surveys we send to tenants

• clarebarnett

137 days

Run user testing of secrets scenarios

110 days

Adding a read-only user to mysql database of RDS Broker when binding an app to a service instance.

119 days

Update our RDS broker MySQL documentation to include the new feature of binding the service instance to an app with a read-only user.

119 days

User activity alerts

169 days

AWS Splunk alerts

169 days

Notify db work

209 days

Separate InfluxDB into different Aiven project(s) from Elasticsearch

• Andy Hunt

195 days

Fix CF conduit apps not being deleted

209 days

Trigger optional Aiven updates

207 days

Add maintenance window to the Aiven broker

207 days

Alert when passwords, secrets or keys are being logged in Logit

207 days

Expose "change password" functionality in paas-admin

207 days

Add auto-refresh on pazmin metrics

209 days

allow tenants to control the RDS database backup retention period

217 days

Add some guidance to our runbooks about how to download data from Elasticsearch in Logit and guidance on asking Cyber to pair with us in incident process ithc

244 days

Vulnerability improvement for PaaS admin

244 days

[WIP] Check we are protected against HTTP request smuggling

217 days

Iterating backlog refinement

• jennifersleeman

194 days

Add PutObjectAcl and GetObjectAcl to aws-s3-bucket service permissions

348 days

MVP for billing

• dave povey

216 days

Make Concourse automatically apply changes to paas-trusted-people

210 days

Change CDN broker to paid only

322 days

---

Docs stories

Tech docs - Backing service metrics - Misc updates

307 days

Add a section on app events to the tech docs

314 days

Tech Docs / Product Page - Write case studies to demonstrate cost of PaaS

324 days

Tech Docs - Content Audit - How GOV.UK PaaS meets the GDS Standards Assurance Process

321 days

Tech Docs / Product Page - Key concepts information

319 days

Tech Docs - Content Audit - Information on what skills your team needs to use the GOV.UK PaaS successfully

321 days

Responsibility model - Expand content to plug gaps

328 days

Tech Docs - Doc-a-thon - Guidance

364 days

Tech Docs - Doc-a-thon - Deploying apps - 12 factor app principles

364 days

Tech Docs - Content Audit - improve cross linking with tech docs

328 days

Tech Docs - Doc-a-thon - Deploying apps - Public apps

328 days

Tech Docs - Doc-a-thon - Deploying apps - Buildpacks

328 days

Tech Docs - Doc-a-thon - Guidance - Penetration testing

328 days

Content audit: User-provided route services

328 days

Content audit: Troubleshooting

328 days

Content audit: Guidance

328 days

Content audit: App restarts

328 days

Content audit: Quotas

328 days

Content audit: Managing custom domains using cdn-route service

328 days

Content audit: Deploy a Java app

328 days

Content audit: Deploy a Django app

328 days

Content audit: Deploy a Node.js app

328 days

Content audit: Deploy a Ruby on Rails app

328 days

Content audit: Excluding files

328 days

Content audit: Secure and non-secure requests

328 days

Content audit: Data Security Classification

328 days

Reviewing (3 / 4)

find / build a ruby:2.7-slim docker container not on dockerhub

• Miki Mokrysz

NEW

Migrate CDN Broker internal database from Postgres 9.5 to Postgres 12.x

3 days

CVE Stemcell Upgrade

• Tom Whitwell

NEW

Approving (0/5)

---

Done (8)

Update VPC peering terraform [had to be reverted]

NEW

Support CCS architecture capability assessment of GOV.UK PaaS for the SCALE programme (closing this card)

NEW

SPIKE: What can be used to collect deployment data (for non-web components)

NEW

Setup new support email address on our branded domain [rejected]

2 days

Test Postgres upgrade paths so we know how to help tenants upgrading from 9.5

2 days

Migrate paas-accounts database from Postgres 9.5 to Postgres 12.x

3 days

Private app documentation suggests it only works with HTTP, not TCP

4 days

Investigate how many tenants impacted by RDS overcharging bug

4 days