2023-01-13 Post planning sync

HIGH I want to deploy the sandbox with different BB candidates so that I can experience the interchangeability of software components

HIGH As an IT expert in a Ghanian ministry/contracted IT consultant I want to be able to select for each BB 1 out of 3 Govstack-Compliant applications and deploy them with a particular use-case configuration so that I can understand Govstack interoperability concept and consider using the architecture and methodology in my own digital transformation.

MEDIUM I want to deploy a sandbox instance with my BB candidate so that I can advertise my product as a possible component of the GovStack BB-based system.

It’s not clear when and how the BB’s will be available to us

Yes

HIGH I want to test the performance and other metrics (e.g. latency, network speed, response time, compression, carbon footprint) so that I can evaluate the potential usage of the architecture.

MEDIUM I want to see the infrastructure performance requirements that is needed to assess the sustainability of the BB based approach.

Not representable of real world environment.

What are meaningful metrics?

Yes

HIGH I want to read an up-to-date documentation (technology stack, licenses, architecture diagram,…) so that I can inform myself about details of use software and architecture.

• Embed and use existing documentation (Playbook)

• Use Gitbook also for Sandbox Documentation

Yes

MEDIUM I want to create self-hosted instance of the sandbox so that I can analyze the system in a safe environment

Where to draw the line?
-> Hosting for MVP @Akseli Karvinen with support of Jarkko and Bert

• Hosting probably limited to AWS

• going beyond AWS is huge effort, must be discussed later

AWS only

MEDIUM I want to be able to access and change source code or any other aspect in a safe environment, so that I can showcase a customized deployment to my colleagues/superiors.

(not discussed yet)

questionable

MEDIUM I want to get a blueprint for DevSecOps environment so that I can build up my own BB-based system.

meaning of devSecOps not clear

LOW I want to get security recommendations on how to set up such an environment so that I can build a secure testing ground for my country's systems.

(not discussed yet)

questionable

MEDIUM I want to check the administration and maintainability concept so that I can evaluate the potentially needed Maintenace efforts.

(not discussed yet)

questionable

MEDIUM I want to run functional and API requirements-based test scripts (and possibly other compliance checks, see status of compliance concept) so that I can proof compliance of my software product.

(not discussed yet)

questionable