Infra Week #4

[erichfi]

Infra week #4 - Focus on Security & streamlining Python services

Week 1 - Security

• https://github.com/passportxyz/core-infra/issues/108
• Internal Team Audit #3197
• https://github.com/passportxyz/core-infra/issues/68
• https://github.com/passportxyz/core-infra/issues/52
• https://github.com/passportxyz/core-infra/issues/40
• https://github.com/passportxyz/core-infra/issues/113
• https://github.com/passportxyz/core-infra/issues/70
• https://github.com/passportxyz/core-infra/issues/117

Week 2 - Infra & workflow optimisations

• Fix JS Code Linting #3221
• https://github.com/passportxyz/core-infra/issues/110
• [monitoring] Regular run + monitoring of the system-tests #3172
• Spike: Management & containerisation of different API services #3233
• https://github.com/passportxyz/core-infra/issues/106. (target savings of $300-500 / month)
• Drop fleek (move developer portal to AWS) #3234

[larisa17]

We should also prioritise https://github.com/passportxyz/core-infra/issues/36

[nutrina]

TODO:

Week 1

• add followup ticket referring to WAF
• move [monitoring] Regular run + monitoring of the system-tests #3172 before the WAF followup

Week 2

• monitoring overview:
  • @larisa17 to check for the existing task (a dashboard)
    • what are the most common endpoints that are hit
    • most common error code

[larisa17]

TODO:

Week2:

• workflows to embed package release
• tool to use 1Password review env & secrets for local development (with only different values to URL )