This document investigates the steps still needed to transition the discovery service (from the GN42 eduTEAMS pilot / GN43 Incubator) to move to WP5 T1 eduGAIN

The transition should finish all the necessery steps to meet the PLM gate for service to enter production. 


The transition generally consist of the following areas of work:

  1. Documentation preparation and signoff
  2. Test and Validation
  3. GDPR compliance checking
  4. IPR compliance checking
  5. Operational team establishment 
  6. Operational team training
  7. Support team establishment
  8. Support team training
  9. Operational deployment
  10. Service promotion


Teams/people:

  • Operations accountable:
  • Development accountable:
  • Service Owner/Manager (SO): 
  • GEANT T&I operation support/Core team:
  • eduTEAMS Devops Team:
  • Test team: 
  • PLM assistance:
  • IPR accountable:
  • GDPR accountable:


Table below DOES NOT yet reflect work in progress or current status - NiDi  


ON HOLD

IN PROGRESS

DONE

No

Work item

Responsible

Comment

Status
1Preparation of documentation - based on the SA2 Service Template





Service Description

Development team prepares

SO and Marina signs off

eduTEAMS - Service Description

Note: when GEANT GitLab is federated and the continuous integration available, the code can be transferred there. At the moment, the NIIFI GitLab instance is being used.



Service policy (AUP)

Development team prepares

GEANT T&I operation support/Core team signs off

DONE

Branding and Visibility

Development team prepares

SO signs off

eduTEAMS - Branding and Visibility

After the production gate, a dedicated website should be prepared, either as a dedicated website or as part of the eduTEAMs central portal. .

DONE

Operational Requirements

Development team prepares

SO, Marina and core team sign off

eduTEAMS - Operational RequirementsDONE

OLA

Development team prepares

SO and Marina GEANT T&I operation support/Core team sign off

eduTEAMS - OLA

The last bit is to put the OLAs in place. This will be mediated by the GEANT T&I operations team, agreement will be made by email confirmation which will be for future reference be saved by the GEANT T&I ops team

The OLA with CESNET and SZTAKI were accepted on 4th January 2019 and 10th January 2019 respectively. The OLAs are available at Service Status Dashboard


DONE


Operational documentation

Development team prepares

SO and Marina signs off

eduTEAMS - Operational Documentation

DONE

Operational processes

Development team prepares

SO and Marina signs off

test team can validate

eduTEAMS - Operational Processes


DONE


User documentation

Development team prepares

SO and Marina signs off

test team can validate

eduTEAMS - User Documentation


DONE


User support

Development team prepares

SO and Marina signs off, test team can validate

eduTEAMS - User SupportDONE

GDPR - data inventory, privacy notice, DPA

Development team prepares

GDPR accountable and SO signs off

eduTEAMS Data Processing

DONE

Roadmap
eduTEAMS - RoadmapDONE
2Test and validation



Make a test plan

Development team and Test team prepares

Done: UI testing and pen testingDONE
3IPR compliance checking



IPR compliance

IPR accountable

Route the request through GEANT T&I operation support/Core team

eduTEAMS - IPRDONE
4GDPR compliance checkingGDPR accountable


Data inventory and mapping/ or Data flows
eduTEAMS Data Processing
DONE

Privacy notice
DONE

Prepare the data processing agreement
DONE
5Operational team establishment



Appoint service manager i.e Service Owner in GN4-3Operations & Service accountable

Christos Kanellopoulos appointed as Service Owner

DONE

Define roles, skills, manpower neededDevelopment teamDefined during the budget and people allocations for the GN-3. Initial requirements are documented at https://docs.google.com/spreadsheets/d/1cBhD3nIwsXmXzbJrsbXWCnklLhD7mnNfVEjrWg1KTBI/edit#gid=0DONE

Appoint devops team members

SMGN4-2
  • GN4-2 SA2:
    • eduTEAMS Central operations support - Dick Visser GÉANT Association
    • eduTEAMS Central ops + 2nd line - Linux and ansible skills - M.Eremija UoB (AMRES)
    • eduTEAMS Central ops + 2nd line - Linux and ansible skills - M.Heder KIFÜ (MTA SZTAKI)
    • eduTEAMS Outsourced components - Comanage - SZTAKI
    • eduTEAMS Outsourced components - Perun - Slavek L. &co,
    • eduTEAMS Outsourced components - HEXAA - SZTAKI

  • GN4-2 JRA3:
    • eduTEAMS Identity Python, satosa, pysaml2 etc. Ivan Kanakarakis NORDUnet (SUNET)
    • eduTEAMS Developer, Oyeniyi Oyeladem, GÉANT
    • eduTEAMS Devops, Frank Tamas, KIFÜ/SZTAKI

GN4-3

  • eduTEAMS Central operations support - Dick Visser GÉANT Association
  • eduTEAMS Central ops + 2nd line - Linux and ansible skills - M.Eremija UoB (AMRES)
  • eduTEAMS Central ops + 2nd line - Linux and ansible skills - M.Heder KIFÜ (MTA SZTAKI)
  • eduTEAMS Central ops + 2nd line - Linux and ansible skills, new hire in GEANT T&I team GÉANT Association

  • eduTEAMS User documentation - Bojana Milidragovic UoB (AMRES)

  • eduTEAMS Outsourced components - Comanage - SZTAKI
  • eduTEAMS Outsourced components - Perun - Slavek L. &co,
  • eduTEAMS Outsourced components - HEXAA - SZTAKI
  • eduTEAMS Outsourced components - WATTs operations- Uros Stevanovic &co for KIT DFN

  • eduTEAMS Identity Python, satosa, pysaml2 etc. Ivan Kanakarakis NORDUnet (SUNET)
  • eduTEAMS Phyton person, new hire in GEANT T&I team GÉANT Association
  • eduTEAMS StepUP, MFA, Tamas Frank, KIFU/SZTAKI
  • eduTEAMS OIDC federation for satosa - need to find good person Unallocated
  • eduTEAMS Front end developer - Andrijana Todosijevic UoB (AMRES)

DONE

6Operational team training



Training the operational team

Development team prepares

The operational team was involved during the development process. As new members are/will be joining the team, training on case by case will be done. The f2f meeting of the eduTEAMS was held on 17-19 December. DONE
7Support team establishment



Establish the support team
The support team was involved during the development process. As new members are/will be joining the team, the support team will be changing its structure. Involvement of the GEANT helpdesk will be done when ready for production

DONE

8Support team training



Training of the support team

Development team prepares

Training for the eduTEAMS team members who are providing support to eduTEAMS customers was held on 17-19 December.

DONE

9Deployment in production environment



Central monitoring set up

GEANT T&I operation support/Core team

Nagios monitoring service is arleady configured and monitors the service. Working with the SA2 core team to transition to the new Zabbix monitoring service when it is readyDONE

Back-up and restoreeduTEAMS Devops Team
The backup and restore of the MMS systems is part of the service delivered by the partners, for which there is OLA with them defining the backup and restore that they are responsible for.
The central components of the service are stateless and completely redeploy-able by using automatic scripts and therefor do not need backup. There is only one component that requires back and that is the database of the consent management service, which contains non-critical data and this is being backed up.

DONE


Resource inventory configuredcore teamwhen available by the core team, not a requirement for productionDONE

VM provision

eduTEAMS Devops Team

AWS offer is used. This needs to be put under the IaaS infrastructure agreement.

DONE

Installation of the componentseduTEAMS Devops TeamDone by the eduTEAMS DevOps teamDONE

Penetration testingTest teamDone by SA2/T1DONE

Functional testingTest TeamDone by SA2/T1DONE
10Service Promotion



Promotion planChristos and engagement teamThe initial plans are already set with the NA engagement team and WP5 enabling communities task

ON HOLD

After the production gate


Web site update

Christos and Karl

Already mentioned under 1. branding and visibility

DONE


Slide deck from the infoshares that can be used by the Research Engagement and support
ChristosAvailableDONE

Article for CONNECTChristos and Karl

In preparation with connect people

DONE


Launch announcement in Tryfon's weekly email when reachedChristos and TryfonAfter production gate

ON HOLD

After the production gate

11PLM Documentation



CBA update

Documents are updated for the service production and available at JRA3 PLM Staging Area


DONE