Roadmap contexts

[zhenik]

Contexts

1. Test & Doc

2. Consistency & Resilience

• Canary deployments & Rolling upgrades Canary deployments #35
• Volumes (nomad context) Volumes (nomad context) #37
• Backup and recovery if containers failure (Backup and recovery #38 )
• Deploy with attached(existing) volume (part of Volumes (nomad context) #37 )
• ... (you name it)

3. Security

• Encryption in transit, service-mesh communication managment (covered by side-car proxies and intentions) Create consul intentions for a given modules and its dependencies #44
• Delegate admin role to vault, to generate dynamic credentatial with short TTL. secrets engine. (Tokens generated and distributed using Vault #42 Use Vault's "Nomad secrets engine" #40 Use Vault's "Consul secrets engine" #41 Usernames and passwords randomly generated and stored in vault / or use AD where applicable / authentication handled by vault #39 )

• minio kv #16
• postgres kv #12

• Certification generation via Vault, PKI #337
• Encryption at rest Encryption at rest #46
• Policies (Admin/Produsent/consument) #397
• ... (you name it)

4. Scaling

• Deployment strategy (master-slave, horizontal, etc...)
• Dynamic/static scaling
• ... (you name it)

5. Observability. How/Where to expose. Additional nodes

• Metrics (Prometheus, ...) and Pre-builded dash-boards(Grafana examples)
• Logs (Splunk, LogStash, ...)
• Traces (Zipkin, OpenCensus, ...)
• ... (you name it)

6. Cover needs of other teams

• Add new module (kafka, nifi, etc...)
• ... (you name it)

7. Enterprise features

• Namespaces Namespaces #43

• consul namespaces #346
• vault namespaces #353

• Sentinel policies Sentinel #45
• ... (you name it)

[zhenik]

Current priorities

• 2. Consistency & Resilience

• 3. Security

• 7. Enterprise features

[zhenik]

40 week priorities

• 3. Security - Policies (Admin/Produsent/consument) - Consul. User stories first. @zhenik