gitcoinco / passport

Passport allows users to prove their identity through a secure, decentralized UI

Other

936 stars 449 forks source link

Infra Week - July #2491

Open erichfi opened 1 month ago

erichfi commented 1 month ago

Infra Week PRD

Overview

This document outlines the tasks and feature requests for the upcoming infra week to enhance our development workflows, migrate repositories, and improve our infrastructure setup. The tasks are divided into detailed user stories, acceptance criteria, and technical details to ensure clarity and ease of implementation.

Feature Requests

Feature Request 0: Migrate Repositories to Passport XYZ Organization

Feature Request 1: Pull Secrets & Env Vars from 1Password

Feature Request 2: Automate Secret Manager Values Update in 1Password

Feature Request 3: Create Utility Script for Exporting ENV Variables and Update Pulumi Scripts

Feature Request 4: Rework and Modularize Workflows for Passport Repos

Feature Request 5: #2402

Feature Request 6: Explore Rust-Based Services for /nonce and VC Verification

erichfi commented 1 month ago

Web3 Product Security Presentation: https://docs.google.com/presentation/d/1VBjyqgiQIAEpN7SCA_7Un56T5sgy6iL8cuSmYu039rQ/edit#slide=id.g2cb7782a1b5_0_104

larisa17 commented 1 month ago

Topics to be considered for the next infra weeks :

move Amplify setup to the id-staking-v2 source code. Create a separate pulumi stack for managing it.
cleanup Passport github actions. It is a complicated flow which causes a lot small issues when new env variables are required. The dependency to the second repo (gh-workflows) was already removed; but the files are not cleaned up / unnecessary complexity removed.
prioritise an automated way to get secrets from 1 password for github actions & local development.
document current secrets : ( eg: which alchemy app is configured & designed for what) . It's important for tracing back configurations when something is not working properly
setup alarms when deployment for review / staging fails even though pulumi up was successful : Amplify fails to build / ECS task can't start

erichfi commented 3 weeks ago

Current frustrations:

Release processes (rollbacks, cherry pick prs)
merge 3 and 11

digitalmnt commented 3 weeks ago

Explore rust based services for /nonce and maybe VC verification

nutrina commented 2 weeks ago

Topics:

https://github.com/gitcoinco/passport/issues/2595
finish monitoring topics: https://github.com/gitcoinco/passport/issues/2402
https://github.com/gitcoinco/passport/issues/2475
from @digitalmnt : Explore rust based services for /nonce and maybe VC verification

erichfi commented 1 week ago

merge feature requests 4 - 9 to rework and modularize the workflows for the passport repos, res tof the details in the docs
merge 3 and 11

Jeremy-Gitcoin commented 1 week ago

@erichfi I'm wondering if we can bring in the Ceramic error writting #2568 to this upcoming infra week? I don't think it's a large effort based on the time with @digitalmnt @lucianHymer onsite