Infra Week - July

[erichfi]

Infra Week PRD

• Story Points: 31
• Deadline: July 30
• Total Points Budgeted: 37 (based on past development throughput)

Overview

This document outlines the tasks and feature requests for the upcoming infra week to enhance our development workflows, migrate repositories, and improve our infrastructure setup. The tasks are divided into detailed user stories, acceptance criteria, and technical details to ensure clarity and ease of implementation.

Feature Requests

Feature Request 0: Migrate Repositories to Passport XYZ Organization

Feature Request 1: Pull Secrets & Env Vars from 1Password

Feature Request 2: Automate Secret Manager Values Update in 1Password

Feature Request 3: Create Utility Script for Exporting ENV Variables and Update Pulumi Scripts

Feature Request 4: Rework and Modularize Workflows for Passport Repos

Feature Request 5: Infra Week: Monitoring of Public and Private APIs

Feature Request 6: Explore Rust-Based Services for /nonce and VC Verification

Feature Request 7: Infra Week: Upgrade Libraries and Fix Build Issues

[erichfi]

Web3 Product Security Presentation: https://docs.google.com/presentation/d/1VBjyqgiQIAEpN7SCA_7Un56T5sgy6iL8cuSmYu039rQ/edit#slide=id.g2cb7782a1b5_0_104

[larisa17]

Topics to be considered for the next infra weeks :

• move Amplify setup to the id-staking-v2 source code. Create a separate pulumi stack for managing it.
• cleanup Passport github actions. It is a complicated flow which causes a lot small issues when new env variables are required. The dependency to the second repo (gh-workflows) was already removed; but the files are not cleaned up / unnecessary complexity removed.
• prioritise an automated way to get secrets from 1 password for github actions & local development.
• document current secrets : ( eg: which alchemy app is configured & designed for what) . It's important for tracing back configurations when something is not working properly
• setup alarms when deployment for review / staging fails even though pulumi up was successful : Amplify fails to build / ECS task can't start

[erichfi]

Current frustrations:

• Release processes (rollbacks, cherry pick prs)
• merge 3 and 11

[tim-schultz]

Explore rust based services for /nonce and maybe VC verification

[nutrina]

Topics:

• Rework workflows #2595
• finish monitoring topics: Infra Week: Monitoring of Public and Private APIs #2402
• Switch to AWS Aurora #2475
• from @digitalmnt : Explore rust based services for /nonce and maybe VC verification

[erichfi]

• merge feature requests 4 - 9 to rework and modularize the workflows for the passport repos, res tof the details in the docs
• merge 3 and 11

[Jkd-eth]

@erichfi I'm wondering if we can bring in the Ceramic error writting #2568 to this upcoming infra week? I don't think it's a large effort based on the time with @digitalmnt @lucianHymer onsite