Sage Migration
This doc captures the work needed to migrate off of Sage-owned services and infrastructure.
- 1 Gmail (ASAP)
- 2 Slack (ASAP)
- 3 Jira/Confluence
- 4 Sumologic (need date)
- 5 JFrog (March 2024)
- 6 VPN (Dec 2024)
- 7 Jumpcloud (Dec 2024)
- 8 Zoom (March 2024)
- 9 G-Suite
- 10 New Relic (Dec 2024)
- 11 Synapse Dev
- 12 CITI Training (Dec 2024)
- 13 Transition Apps to New Accounts
- 14 GitHub Repo Transfer (Fork/Copy)
- 15 Web Domains
- 16 Web Hosting
- 17 Firebase/Crashlytics (March 2024)
- 18 Android Certs Repo (March 2024)
- 19 Open ID?
- 20 LastPass
- 21 AWS
- 22 Tower
Gmail (ASAP)
This will include individuals setting up or transferring accounts from their sagebase.org emails to their new emails. Also, individuals will need to backup their email or otherwise make sure we don’t lose knowledge when we change our email addresses.
Also, we need to point our dev-ops emails and email bounce notifications to new addresses in the new org.
App Stores with bridge digital emails
Synapse repositories updated
Dashboards and BSM updated with correct emails
Slack (ASAP)
DONE
Jira/Confluence
In progress - Ann working with IT
We’ll also need to extract information we need from Virus Scanning of Files
IT-3508 in PROGRESS
Sumologic (need date)
Owner: Dwayne
- IT-3430Getting issue details... STATUS
Only Bridge uses SumoLogic. However, IT still owns the account. Reaching out to IT to see if we can claim ownership of the account.
Note that we will need to update the billing (after the spin-off is finalized).
The work is entirely administrative. I estimate the work doesn’t even reach 1 sprint point.
JFrog (March 2024)
Nate - will transistion to using github actions
VPN (Dec 2024)
Owner: Dwayne
Bridge Server, Worker, Jenkins, and DB are all associated with the Bridge VPN. Part of this work involves moving them to a different network not owned by Sage. This may mean abandoning our Cloud Formation templates. More investigation is required.
TODO break down this work and cost it
May want to identify a VPN to create our own.
Jumpcloud (Dec 2024)
login manager - need to identify replacement (need costing on jumpcloud to create our own or identify a different manager. Can setup username/password direct if necessary.
Zoom (March 2024)
Solution is to create an admin account for 1 user with admin style email and login to be maintained in lastpass for all users.
Each member of Open Bridge will create a free zoom account to login and schedule short meetings (less than 40 minute)
Open item - can we schedule and use zoom rooms at Sage offices with our account, or do we need to request Sage exec admin team to maintain invites
Erin to create admin account for Zoom.
G-Suite
Done - all employees have access to gmail and all associated tools (docs, sheets, google drive)
New Relic (Dec 2024)
Owner: Dwayne
Only Bridge uses New Relic. I am an admin on New Relic and can take ownership of it. Reaching out to IT to make confirm that this is okay.
Note we currently log into New Relic using JumpCloud. In order to de-couple New Relic migration from JumpCloud migration, we’ll need to create an Authentication Domain that allows login using username/password.
Note that we will need to update the billing (after the spin-off is finalized).
The work is entirely administrative. I estimate the work doesn’t even reach 1 sprint point.
Update on New Relic: I tried to downgrade to the free plan, and I discovered that our current plan is kinda nonsensical. We get less than what the free plan offers, and apparently, it’s an annual plan, billed us $2700 when we first signed up, $270/mo every month starting the month after our subscription began, and attempting to cancel hits us with a $2214 bill.
Seems entirely nonsensical. I’ve reached out to Sales to figure out what’s going on.
- IT-3431Getting issue details... STATUS
Synapse Dev
Owner: Dwayne
This is used by Integ Tests. Current assumption is that after the spin-off, we won’t have permission to use Synapse Dev anymore.
The work involved is to create a BridgeTest account in Synapse Prod to run integ tests, and a trivial code change in Integ Test and Worker Integ Test to use this account and to use Synapse Prod instead of Synapse Dev.
Estimated effort: 1 sprint point
Bruce/Xa confirmed to continue access to Synapse Dev to run testing - no work needed.
CITI Training (Dec 2024)
Open Bridge team to take CITI Training via Sage this year. We will need to figure this out for next year.
GCP course is 129 for basic course
Transition Apps to New Accounts
Erin - create new open bridge appstore accounts for iOS and Android
Apple appstore account is processed (confirmation pending of payment)
android to be setup 3/8/24
We will need to transfer ownership of Sage appstores to an admin account and secure secrets in lastpass with 2FA. Will validate with Solly/Sonia for admin accounts.
GitHub Repo Transfer (Fork/Copy)
Owner: Dwayne
Right now, a lot of server-side repos are still under Sage-Bionetworks. This is because we use Travis, and Travis keys are encrypted using a key specific to the repo. Migrating or forking the repos will require us to re-encrypt all of our keys in Travis. This isn’t difficult work, but it is work that needs to be enumerated and costed.
Does not include license stuff, which will be handled separately.
TODO break down this work and cost it
Web Domains
sagebridge.org (March 2024)
We have existing customers with existing apps that talk to Bridge Server using sagebridge.org. Ideally, we keep ownership of this domain.
Up for renewal from GoDaddy on Apr 13. We’ll want to take care of this before, let’s say, end of March.
Will need to move ARC and INV ARC dashboards to new domain as we will not transition sagebionetworks.org domain
Validated with Xa/Bruce that we can transfer sagebridge.org ownership to Open Bridge.
- IT-3515Getting issue details... STATUS
Web Hosting
Make sure S3 buckets where Bridgedigital.health web sites live get transferred to OpenBridge AWS account, along with setting up Cloudfront or whatever other DNS correctly
IT-3515
Firebase/Crashlytics (March 2024)
ARC is setup. Trivial work for Open Bridge to support in new appstores/codebases
Will need to make sure to delete from Sage once new are created. Validate if can be done on OpenBridge side. If not will need to create IT ticket.
Android Certs Repo (March 2024)
Nate to setup with Github actions and set secrets in Lastpass
Open ID?
LastPass
DONE
AWS
We own:
org-sagebase-bridgedevelop
org-sagebase-bridgeprod
Deprecated BridgeDownstream envs (that we can (probably) turn off): Need validation that IT can transfer to new owners
org-sagebase-mobilehealth-dataengineering-dev
org-sagebase-mobilehealth-dataengineering-prod
- IT-3516Getting issue details... STATUS
- IT-3517Getting issue details... STATUS
Tower
Sage gets this for free as a non-profit. Individual pricing is $69/yr per account. Pro pricing with consolidated billing is $99/yr-user. We could also look at alternatives (source tree) or just use the git cli.