Connectivity between NOMIS in Azure and NOMIS Test in Mod Platform - Githubissues

ministryofjustice / modernisation-platform

A place for the core work of the Modernisation Platform • This repository is defined and managed in Terraform

https://user-guide.modernisation-platform.service.justice.gov.uk

MIT License

683 stars 291 forks source link

Connectivity between NOMIS in Azure and NOMIS Test in Mod Platform #1379

Closed davidkelliott closed 2 years ago

davidkelliott commented 2 years ago

User Story

Connectivity between NOMIS in Azure and NOMIS Test in Mod Platform

See thread here: https://mojdt.slack.com/archives/C01CLTGTXT7/p1641826667005700

Following guidance here - https://docs.google.com/document/d/1Z9ddlu5XDAq6B6_uH2isKbcntx-nod5abNENc72wRv0/edit We can enable connectivity with the following:

[x] MP TGW egress route back to NOMIS VNETs
[x] MP Firewall rule to allow traffic from NOMIS VNETs
[x] MP NACLs rules updated to allow traffic from NOMIS VNETs
[ ] Security group changes on the Instances in MP that are being connected to
[ ] PTTP TGW egress route back to NOMIS VNETs

Ingress routes to the hmpps-test VPC are already present. NOMIS Azure CIDR range - 10.101.0.0/16

Ports required - 22, 1521, 3872, 4983, 5556, 7001 and 7777

Value

Enable connectivity between NOMIS Azure and Test NOMIS MP

Questions / Assumptions

Definition of done

[ ] above changes made
[ ] another team member has reviewed
[ ] tests are green

Reference

How to write good user stories

davidkelliott commented 2 years ago

Connectivity has now been established and tested for port 1521, any additional ports needed we can easily add to the firewall as part of bau