Mines Digital services Pilot - Aporeto Design Pattern #2

stewartshea commented 5 years ago

DMZ -> Zone A/B/C Design

The outstanding items:

[ ] Need a clarification from Aporeto re: why a rule where we need to allow the enforcer point to talk to itself was needed.
[ ] Confirm that the 2 enforcer points setup in NRM Zone B are fully HA. Need to test this. Clecio will work with Steve to test that.
[ ] There was an issue with the access token to aporeto that needed to be manually refreshed. What is an agreed upon process for how to update that on a regular basis?
[ ] What is the procedure for contacting DXC should a change be required for the proxy or the enforcer?

tosazuwa commented 5 years ago

@cvarjao To add endpoint to connect to database

mitovskaol commented 5 years ago

Two VMS - REFINE and FILTER - provisioned in Calgary Firewall rules in place to communicate from LAB OCP to the enforcers points on VMs in Calgary Tested and confirmed the VMs can get to Aporeto Console through the NRM Forward proxy in DMZ. Setup a namespace in Aporeto for the MDS app /bcgov/...../apps/app-name List of users to have access to the Aporeto namespace Schedule an installation of enforcers on the VMs

BCDevOps / platform-services

Mines Digital services Pilot - Aporeto Design Pattern #2 #100