Closed viviant100 closed 5 months ago
This tasks requires to rewrite the terraform scripts.
Some other parts of the of the deployment need to be terraformed (e.g. RDS database).
status: working on improving terraform scripts to enable this deployment
@ramesh-maddegoda is making good progress on that.
The deployment works but the DAG still have permission issues.
Status: Adjusting roles for access. Currently testing the DAGs with lowest privileges and fixing some of those issues. No blockers. Terraform has been improved. Plan to destroy/redeploy before ready for production.
Ramesh tested the deployment from scratch : need to launch the terraform twice because credential expires but that is ok.
The deployment fully work expect for harvest which needs a whitelisted IP to send data to the JPL AWS OpenSearch.
For more flexibility in the future we might have multiple nucleus instance deployed in dev and test, using a prefix for example.
Created pull request https://github.com/NASA-PDS/nucleus/pull/98 to update Terraform scripts, IAM policy files, Lambda functions and documentation to deploy PDS Nucleus in MCP Test and Prod environments.
@ramesh-maddegoda need to update the terraform README and the PR is ready for review.
Presentation done to the SA. Review went well. Ramesh will investigate using secret manager for harvest configuration.
Status: Continuing to evolve and update terraform code.
Verified that Nucleus can process CSS data from DUM. All the terraform related changes were merged in to the main branch with the PR: https://github.com/NASA-PDS/nucleus/pull/98
Ramesh added SQS in the terraform script to queue the lambda calls. It is tested.
💡 Description
Deploy with the least level of performance/workers possible for nucleus in Test env.
⚔️ Parent Epic / Related Tickets
No response