Establish secure communication between RSBC BI API DEV in OCP PROD and RSBC Power BI Server in zone B (must have)

tosazuwa commented 5 years ago

RSI-1403 Openshift pod to proxy hosts in Justice Zone B

Applications: RSBC BI backend pod to BI Server – in this direction Who: RSI team Why: Openshift BI app cannot send data to BI Server in Justice Zone B.

Tasks:

[ ] Provision one VM as a proxy in JAG DMZ in Calgary to host an Aporeto enforcer iStore order submitted and completed
[ ] Configure the proxy and install the Aporeto enforcer iStore order submitted and is in progress
[ ] Test the connectivity between the OCP PROD cluster in DMZ, the Aporeto proxy in JAG DMZ and the BI Server in JAG Zone B in Calgary. The assumption is that this connectivity is already available and no firewall rules are needed so just need to confirm
[ ] Develop a custom Aporeto policy for the Aporeto proxy to allow connections from the RSI Hub app hosted in the OCP PROD to the BI Server (port 1543) in .
[ ] Test the connectivity and sign off

tosazuwa commented 5 years ago

This will leverage the use case that will be established by the digital mines project but configured uniquely for the justice sector

jleach commented 5 years ago

The VM is orders as part of iStore #995027. They're waiting for approval (someone to pay for it).

tosazuwa commented 5 years ago

Moving this to Sprint 7 due to the external dependency (DXC)

BCDevOps / platform-services

Establish secure communication between RSBC BI API DEV in OCP PROD and RSBC Power BI Server in zone B (must have) #211