search

lsc-sde / lsc-sde

Lancashire and South Cumbria Secure Data Environment
MIT License
1 stars 0 forks source link

Architecture: Guacamole with XFCE pods over VNC #57

Open qcaas-nhs-sjt opened 1 month ago

qcaas-nhs-sjt commented 1 month ago

As architect I would like to draw up an architecture for Guacamole with XFCE pods over VNC based upon lsc-sde/lsc-sde#55

qcaas-nhs-sjt commented 1 month ago

Added: https://github.com/lsc-sde/lsc-sde/blob/main/docs/Secure-Data-Environment/External-Access-5.md

qcaas-nhs-sjt commented 1 month ago

Reviewing tasks for implementation:

Type Feature Estimate
Configuration Guacamole to use Open ID Connect 3 days
Product Extension Guacamole to talk to kubernetes API 10 days
Browser Container Build Browser Container Images 3 days
Operator Development Build AWMS Guacamole Operator 5 days
Operator Development AWMS Network Policy Operator 5 days
IAC App Gateway Service 1 day
Product Extension Jupyter to limit workspaces allowed depending on source of connection 5 days
Product Extension OHDSI on Jupyter 5 days

Adding in refinement time and buffer this looks to take approximately 44 days of effort, though some of these features can be built in parallel with another

qcaas-nhs-sjt commented 1 month ago

@vvcb @m1p1h I've added in documentation and estimate for this.

qcaas-nhs-sjt commented 1 month ago

Further to our conversation this morning, it appears that Greater Manchester are using a similar methodology on a local container solution, it would be good to review what they have as it might reduce the time to build the container image, though I suspect much of the rest will still ned to happen as planned

qcaas-nhs-sjt commented 3 weeks ago

This workstream has been approved by the TDA