Moving away from transit-gateway AWS account

poornima-krishnasamy commented 12 months ago

Background

As part of migrating the CP transit gateway to connect directly to PTTP transit gateway, there are few steps as part of cleanup https://runbooks.cloud-platform.service.justice.gov.uk/cloud-platform-to-tgw.html#moving-away-from-cloud-platform-transit-gateway-account

Proposed user journey

This is required so the codebase is maintained and the s3 bucket is stored as part of Cloud Platform aws account.

Approach

The steps are mentioned in the runbook https://runbooks.cloud-platform.service.justice.gov.uk/cloud-platform-to-tgw.html#moving-away-from-cloud-platform-transit-gateway-account

Create s3 bucket in CP account, move the state file from transit-gateway account and link the new s3 bucket in the repositor
Move the code from transit-gateway-cloud-platform folder repo to cloud-platform-infrastructure or similar where CP can have manage with only CP account permissions
If there is only cloud-platform related code present in the repo: https://github.com/ministryofjustice/transit-gateways, probably move the whole repo to cloud-platform team maintainance.
~~Create a concourse pipeline to apply the transit-gateway code changes to CP account~~ This task is now #5237
~~Create user guide for when a user want to add a new route to the transit-gateway connecting the live-1 vpc~~ This task is now #5238

Which part of the user docs does this impact

Communicate changes

[x] post for #cloud-platform-update
[ ] Weeknotes item
[ ] Show the Thing/P&A All Hands/User CoP
[ ] Announcements channel

Questions / Assumptions

Definition of done

[x] readme has been updated
[ ] user docs have been updated
[ ] another team member has reviewed
[ ] smoke tests are green
[ ] prepare demo for the team

Reference

How to write good user stories

prakash-moj commented 10 months ago

Some of the required changes done as part of - https://github.com/ministryofjustice/transit-gateways/pull/44

Analysing Transit Gateway flow logs to see if Ireland Transit Gateway used at all.

prakash-moj commented 10 months ago

ransit Gateway (eu-west-1) logs analysis - https://docs.google.com/document/d/1TpSR5-nNFnCAFMfZGe7ytoE0FViM5iLWvMlflNDynKs/edit

Log extract - https://drive.google.com/file/d/1BesGM08Z0C9kePLeqRZA1uqbpJg2u8MQ/view

poornima-krishnasamy commented 10 months ago

Create s3 bucket in CP account, move the state file from transit-gateway account and link the new s3 bucket in the repository DONE

davidkelliott commented 10 months ago

I have confirmed with @julialawrence that we are ok to remove the AP TGW attachments, but please let her know before commencing any decommissioning so she can keep an eye out for issues.

kyphutruong commented 9 months ago

Moving CP transit gateway code to infrastructure repo

kyphutruong commented 9 months ago

Cloud Platform transit gateway attachments and route configurations have been migrated to the cloud-platform-infrastructure repo

ministryofjustice / cloud-platform