cds-snc / notification-planning-core

Project planning for GC Notify Core Team
0 stars 0 forks source link

Decommission Hasura #353

Open jimleroyer opened 6 months ago

jimleroyer commented 6 months ago

Description

As a system operator for GCNotify, I want to get rid of Hasura, So that we remove tools with subpar security and audit best practices And leverage newer tools that are better aligned with these.

WHY are we destroying?

Hasura served us long enough for direct access to the database but it is limited for audits, user managements and logs. We now have AWS VPNs in place which do these better.

WHAT are we building?

Getting rid of Hasura.

VALUE created by our solution

Better alignment with the organization best practices around audits and security. Simplifying our overall access to the database management while having something more solid in place.

Acceptance Criteria

QA Steps

jimleroyer commented 4 months ago

We removed the Hasura instances in both staging and production environments. This should not be reachable anymore and completely down. The PR to remove it from Terraform/kustomize was merged as well so further infrastructure releases will recreate Hasura related resources.