In hours: Michael Mokrysz Comms: Jenny Sleeman

Out of hours: Rafal Proszowski Comms: Paul Dougan

Escalations: Albert Massa

---

Doing (7)

Recruit participants for secrets scenarios

• markpeterbuckley

18 days

Trial accounts - agree process for closing old unused ones and saving some £

• jennifersleeman
• Kam Nijjar

15 days

Learn disaster recovery for Vault so we know if it is suitable for tenant secrets

• Sebastian Schmieschek
• Maxim Avezbakiev

6 days

Make autoscaling adoption trackable by PM/DM

• Andy Hunt

5 days

Test what happens when an AZ disappears

• Mohamed Deerow

2 days

Final prep for Community Show & Tell

• jennifersleeman
• markpeterbuckley
• Kam Nijjar

2 days

Submit secrets tooling recommendation to IA for assessment

• jennifersleeman
• markpeterbuckley

2 days

---

Next

Link to forgotten password functionality from login page

3 days

Remind tenants to set new DNS records for ACM

30 days

Add process level metrics to paas-prometheus-exporter

10 days

SPIKE: API Tokens

11 days

Run and update/export for Q2 on PaaS service usage spreadsheet

2 days

1/10

Dynamic billing scoping

19 days

Support CCS architecture capability assessment of GOV.UK PaaS for the SCALE programme

• Paul Dougan

58 days

[SPIKE] Configure HTTP Desync mitigation

25 days

Redesign the surveys we send to tenants

• clarebarnett

53 days

Run user testing of secrets scenarios

26 days

Adding a read-only user to mysql database of RDS Broker when binding an app to a service instance.

35 days

Update our RDS broker MySQL documentation to include the new feature of binding the service instance to an app with a read-only user.

35 days

Review 2019Q4: Dynamic Billing stories ready for Q2 epic

40 days

User activity alerts

85 days

AWS Splunk alerts

85 days

Notify db work

125 days

Separate InfluxDB into different Aiven project(s) from Elasticsearch

• Andy Hunt

111 days

Fix CF conduit apps not being deleted

125 days

Trigger optional Aiven updates

123 days

Add maintenance window to the Aiven broker

123 days

Alert when passwords, secrets or keys are being logged in Logit

123 days

Tagging tickets (zendesk) - review why we're doing this and if we could make the process easier

123 days

Expose "change password" functionality in paas-admin

123 days

Add auto-refresh on pazmin metrics

125 days

Allow Elasticsearch users to apply updates & upgrade to ES7

160 days

allow tenants to control the RDS database backup retention period

133 days

Add some guidance to our runbooks about how to download data from Elasticsearch in Logit and guidance on asking Cyber to pair with us in incident process ithc

160 days

Vulnerability improvement for PaaS admin

160 days

[WIP] Check we are protected against HTTP request smuggling

133 days

Iterating backlog refinement

• jennifersleeman

110 days

Add PutObjectAcl and GetObjectAcl to aws-s3-bucket service permissions

• Richard Towers

264 days

MVP for billing

• dave povey

132 days

Make Concourse automatically apply changes to paas-trusted-people

126 days

Upgrade prometheus boshrelease

126 days

Change CDN broker to paid only

238 days

---

Docs stories

Tech docs - Backing service metrics - Misc updates

223 days

Add a section on app events to the tech docs

230 days

Tech Docs / Product Page - Write case studies to demonstrate cost of PaaS

240 days

Tech Docs - Content Audit - How GOV.UK PaaS meets the GDS Standards Assurance Process

237 days

Tech Docs / Product Page - Update security section

235 days

Tech Docs / Product Page - Key concepts information

235 days

Tech Docs - Content Audit - Information on what skills your team needs to use the GOV.UK PaaS successfully

237 days

Tech Docs / Product Page - Create Constraints section

235 days

[Placeholder] Update tech docs on DDoS protection

226 days

Tech Docs / Product Page - Expand buildpacks information

235 days

Tech Docs / Product Page - Essential introductory information

235 days

Responsibility model - Expand content to plug gaps

244 days

Tech Docs - Doc-a-thon - Guidance

280 days

Tech Docs - Doc-a-thon - Deploying apps - 12 factor app principles

280 days

Tech Docs - Content Audit - improve cross linking with tech docs

244 days

Tech Docs - Doc-a-thon - Deploying apps - Public apps

244 days

Tech Docs - Doc-a-thon - Deploying apps - Buildpacks

244 days

Tech Docs - Doc-a-thon - Guidance - Penetration testing

244 days

Content audit: User-provided route services

244 days

Content audit: Troubleshooting

244 days

Content audit: Guidance

244 days

Content audit: App restarts

244 days

Content audit: Quotas

244 days

Content audit: Managing custom domains using cdn-route service

244 days

Content audit: Deploy a Java app

244 days

Content audit: Deploy a Django app

244 days

Content audit: Deploy a Node.js app

244 days

Content audit: Deploy a Ruby on Rails app

244 days

Content audit: Excluding files

244 days

Content audit: Secure and non-secure requests

244 days

Content audit: Data Security Classification

244 days

Reviewing (4 / 4)

Pazmin: Date Input Components (A)

10 days

Upgrade tenant Postgres instances to recent versions

11 days

SPIKE: Investigate low recharge rate for RDS in London

• jennifersleeman
• Andy Hunt

NEW

Add support for isolation segments within paas-cf

2 days

Approving (2/5)

Spike to validate data from AWS billing api

5 days

Improve error messages when PaaS things go wrong

2 days

---

Done (4)

Resolve Monday night's potential incident: leaked AWS key

NEW

create and send comms to our tenants about read-only user for postgres db.

2 days

Remove IPSec release safely

3 days

Audit of CF Deployment

3 days