Please enable JavaScript.
Coggle requires JavaScript to display documents.
Openshift 1.0 Production MVP ("Chaos Monkey" High availability…
Openshift 1.0 Production MVP
Agility
Allows us to iterate and validate faster
Automated OpenShift Cluster Build Pipeline
AE-500
Automate Creating/Destroying/Getting Terraform Outputs from TFE
AE-514
Automate creating Ansible Inventory from Terraform Output
AE-516
Create rebuild.ocp.kar-central1.karit.internal Jenkins job, which calls TFE, Ansible, & runs validation tests.
AE-461
Create validation tests to ensure OpenShift is running correctly
AE-461
Automated Validation for OCP Cluster
AE-499
Automate installation & configuration of Tiller / Helm on OCP
"Chaos Monkey"
High availability / Disaster Testing
AE-521
Test & document master node failure resiliency
AE-522
Test & document infra node failure resiliency
AE-520
Test & document app node failure resiliency
AE-523
Test & document haproxy failure resiliency
AE-518
Test & document full OCP power outage recovery
AE-519
Load Test OCP
AE-524
Document single points of failure
AE-517
Document best sources for troubleshooting OpenShift
Security
Authentication, Authorization, Hardening
AE-533
Setup production-ready IDM servers
AE-236
Setup RBAC Groups in IDM for OpenShift
Test & Validate Tenant Isolation
AE-457
Join/Rebuild OpenShift Clusters to appropriate IDM child domain
AE-220
Configure Vault to authenticate via IDM
AE-502
Create karit.internal user accounts for everyone on Automation team
Monitoring
Alerting, Logging, Monitoring
Alerting
AE-459
Setup PagerDuty for Team & Basic Workflow
Logging
AE-238
Configuring Splunk Connect to collect OCP and application logs
Monitoring
AE-259
Configuring Prometheus and Solarwinds to monitor OCP-specific metrics
Infrastructure
The actual infrastructure required, environments, tools, etc.
Jenkins
AE-510
Jenkins - Add dynamic slaves
AE-511
Jenkins - Use IDM for security, disable all other access
Configure Jenkins logs to go to Splunk
AE-501
Setup Hashicorp Vault
AE-221
Auto init and unseal Vault, leverage KMS for now
AE-503
Build out 4 OCP Clusters, Infra, Dev, Stage, Prod
AE-477
Set up NTP clients on automated boxes
Backups
Backup & Recovery
Setup daily backups for Ansible Tower
AE-310
Scale Tower to 3 node cluster from 1 node
AE-534
Setup daily backups for Terraform Enterprise
AE-530
Test / Document Migrating workloads from one OCP Cluster to another
Back up & Restore OpenShift Cluster
AE-506
Automate Backup / Restore of OCP Cluster Data Files
AE-507
Automate Backup / Restore of OCP Etcd Data on all Masters
AE-505
Automate Backup & Restore of OCP API Objects
AE-508
Automate Backup / Restore of OCP Registry storage
AE-504
Automate Backup / Restore of OCP Volume storage
AE-211
Create backups for Vault
AE-218
Create backups for Consul
Application Modernization
Moving OpenLane to Containers
Develop CI Pipeline for Applications
AE-580
Deploy Spring-Petclinic Application to Infra OpenShift cluster
AE-581
Create repeatable promotion process in Jenkins for Spring-Petclinic Application
Networking
Ingress/Egress/Firewalls/WAFs
AE-513
Document Ingress & Egress Architecture for OCP
AE-512
Set up Container Application with External Ingress Working
AE-515
Setup real certificates/https for OpenShift
AE-528
Configure Internal DNS for Infra/Dev/Stage/Prod Environment OCP Consoles
Operationization
Being able to maintain/operationalize OpenShift Clusters
AE-529
Document / Test / Automate Linux Patching OpenShift Cluster
AE-526
Document / Test / Automate Upgrading OpenShift Cluster
AE-532
Service Now Automation
AE-525
Create Splunk Dashboards for Monitoring OpenShift
AE-531
Document / Test / Automate adding Capacity to OpenShift
AE-272
Define quotas and resource limits for application pods
Artifactory
Setting up Artifactory for Production
AE-567
Setup High-Availability Artifactory Servers
AE-570
Configure Artifactory to authenticate via IDM
AE-568
Configure Monitoring for Artifactory
AE-569
Configure Artifactory logs to go to Splunk
Sonarqube
AE-578
Setup Sonarqube in AWS
Configure Monitoring for Sonarqube
Configure Sonarqube logs to go to Splunk
AE-579
Configure Sonarqube to authenticate via IDM