Git Product home page Git Product logo

solo's Introduction

This project is no longer being maintained:

SOLO served as a proof-of-concept project and as of 8/4/20 is no longer being maintained. It will remain open-source to serve as an example of secure, scalable, and repeatable software development practices.

solo

System for Operational Logistics Orders (SOLO)

Code style: open issue Code style: open pull request Code style: languages Code style: contributors code style: prettier Code style: black Code style: size License: MIT

DoD Vulnerability Disclosure Program (VDP)

The DoD VDP leverages the experience and knowledge of ethical hackers from around the world to improve network defenses and enhance mission assurance. For contribution, please follow the DoD VDP at dc3.mil

solo's People

Contributors

dds-hansolo avatar dependabot[bot] avatar jaryt avatar jhackshaw-dds avatar lit-dds avatar scasarottodds avatar scottpiercewdds avatar vcastro-dds avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar

solo's Issues

Frontend request auth domain and store received JWT in localstorage

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Cache dependencies in circleci

Is your feature request related to a problem? Please describe.
n/a

Describe the solution you'd like
Cache dependencies in circleci.

Describe alternatives you've considered
n/a

Additional context
n/a

NGINX configuration of redirects between auth.solo.code.mil and www.solo.code.mil for CAC authentication

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Create Basic CI/CD Pipeline Additions for Backend Tests.

Is your feature request related to a problem? Please describe.
The code quality must undergo rigorous testing to follow the guidelines outlined in the SSAG prior to deployment. Therefore, a basic pipeline should be outlined early to indicate the process of working with the CI/CD.
Describe the solution you'd like
I would like a basic .yml file to be instantiated which will run backend tests demonstrating how the CI/CD pipeline will be built via GithubActions or CircleCI.
Describe alternatives you've considered
GithubActions and CircleCI have been the primary choices spoken about to provide this functionality. GithubActions is built into the hosting service we are using (Github), which makes it convenient, but circleci is fed ramped and may be adventageous in the approval of the SSAG.
Additional context
N/A.

Create Hello World Front-end React App

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Include linting and and at least one test.

Describe alternatives you've considered
n/a

Additional context
n/a

Setup pre-commit hook to run tests, linting, and other CI checks

Is your feature request related to a problem? Please describe.
A pre-commit hook that requires tests, linting, code-style and other CI checks to pass locally prior to allowing commits.

Describe the solution you'd like
An easily installable script that runs prior to every commit and replicates the CI environment as closely as possible.

Describe alternatives you've considered
N/A

Additional context
N/A

Create Entity Relational Diagram (ERD) for Receipt of Goods

Is your feature request related to a problem? Please describe.
Needed to set up DB schema.

Describe the solution you'd like
A third normal form ERD.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Failed circleCI back-end test: Error when restoring cache

Thanks for submitting an issue! Below are a few things you can do to help us more quickly address the issue.

Checklist

I have…

  • described in detail below both the behavior I expected and the behavior I observed.
  • thoroughly outlined below the steps to reproduce this issue, including relevant technical details (e.g. device, operating system, browser, browser version).
  • attached screenshots illustrating relevant behavior.

Expected Behavior

CicrcleCI should cache dependencies when testing and unarchive dependencies for tests.

Observed Behavior

Back-end test failed in circleCI
Failed to unarchive cache
Error untarring cache: Error extracting tarball /tmp/cache875118812

Steps to Reproduce

To reproduce this issue merge a new branch into master after adding a new dependency.

Screenshots

image

Provision Redis store

Is your feature request related to a problem? Please describe.
As a user I don't want to wait for GCSS uptime to submit my D6T so that I can keep working on other D6Ts.

Describe the solution you'd like

  • Provisioned redis store for use as a message queue for GCSS API requests

Depends on #14

Describe alternatives you've considered
N/A

Additional context
N/A

Infrastructure setup using Terraform

Is your feature request related to a problem? Please describe.
Automate the creation of the Infrastructure as code utilizing terraform.

Describe the solution you'd like
Generate .tf, .tfvars, etc to programmatically create the infrastructure as code for AWS.

Describe alternatives you've considered
"The is the way"

Additional context
Add any other context or screenshots about the feature request here.

Add Static Code Analysis to CI/CD Pipeline

Is your feature request related to a problem? Please describe.
DoD mandates code be checked statically for security issues.

Describe the solution you'd like
A clear and concise description of what you want to happen.
I would like static analysis to be performed on the frontend and backend code in the CI/CD pipeline without human intervention.
Describe alternatives you've considered
Because this is a DoD Mandate, static analysis must be performed. Due to the rapid ATO process, this needs to be automated in some fashion in the CI/CD pipeline.

Additional context
N/A.

Create initial API endpoint

Is your feature request related to a problem? Please describe.
As a developer, I want to access an api endpoint so that I can have a starting point for hello world.

Describe the solution you'd like
developer goes to a url to see an api endpoint.

Describe alternatives you've considered
N/A

Additional context
Add any other context or screenshots about the feature request here.

Create Basic CI/CD Pipeline Additions for Frontend Tests.

Is your feature request related to a problem? Please describe.
The code quality must undergo rigorous testing to follow the guidelines outlined in the SSAG prior to deployment. Therefore, a basic pipeline should be outlined early to indicate the process of working with the CI/CD.
Describe the solution you'd like
I would like a basic .yml file to be instantiated which will run frontend tests demonstrating how the CI/CD pipeline will be built via GithubActions or CircleCI.
Describe alternatives you've considered
GithubActions and CircleCI have been the primary choices spoken about to provide this functionality. GithubActions is built into the hosting service we are using (Github), which makes it convenient, but circleci is fed ramped and may be adventageous in the approval of the SSAG.
Additional context
N/A.

Obtain DoD certificate

Is your feature request related to a problem? Please describe.
Obtain a DoD certificate to pass to GCSS for whitelisting purposes.

Describe the solution you'd like
Provisioned and signed DoD certificate.

Depends on #59

Describe alternatives you've considered
N/A

Additional context
N/A

Decide on message queue tool

Research

Amazon elasticache
Azure managed redis
Use the DB instead of a message queue

Recommendation

N/A

Action

N/A

Screenshots

N/A

Decide on style guide

Research

See Jeff's comments

Recommendation

See Jeff's comments

Action

Adopt Black for linting and fixing Python code style
Adopt Prettier for linting and fixing js/ts code style

Screenshots

Attach relevant screenshots here.

Create API Docs specifically applicable to SOLO

We should create a document for internal use of the API endpoints we will use. This can begin with a single endpoint we will use once we get access to the test server but will then grow as we utilize more. When started, a discussion should be had about whether it lives in the repo wiki or outside the repo.

Determine Container Orchestration and Scaling Implementation which can be portable from AWS to Azure

Research

Kubernetes implementations

  1. Kops
  2. Fargate
  3. Kubespray
    a. Uses a .yaml file and integrates easily with terraform.
  4. Conjure-up
    a. Can be deployed to both Amazon and Azure
    b. Requires a controller (additional VM to be deployed)
  5. NetApps Kubernetes Service
    a. Cloud agnostic
    b. Can connect quickly and can be launched from Git
    c. Can be expensive (Since it is a third party orchestration

Recommendation

  1. Sabers uses Fargate, so shall we.

Action

Sabers Uses Fargate, so shall we.

Screenshots

NA

Parallelize CI/CD pipeline

Is your feature request related to a problem? Please describe.
n/a

Describe the solution you'd like
Parallelize CI/CD pipeline to speed up testing.

Describe alternatives you've considered
n/a

Additional context
Additional context can be found in issue #35

Configure Hello World container for Fargate deployment

Is your feature request related to a problem? Please describe.
Configure a hello world container to scale automatically using fargate.

Describe the solution you'd like
-Obtain account access to use Fargate.
-Incorporate Fargate into the Solo CI/CD pipeline.
-Launch a container from a container registry using fargate to a staging environment.

Describe alternatives you've considered
N/A

Additional context
N/A

Create AWS cost estimate

Research

Create cost estimates for required AWS services.

Recommendation

Depends on #61

Action

N/A

Screenshots

N/A

Create CI/CD Pipeline Additions for Dependency Checking.

Is your feature request related to a problem? Please describe.

The code quality must undergo rigorous testing to follow the guidelines outlined in the SSAG prior to deployment. Therefore, a basic pipeline should be outlined early to indicate the process of working with the CI/CD.

Describe the solution you'd like

I would like an edited config.yml file which demonstrates how the CI/CD pipeline will check dependencies using Snyk via GithubActions or CircleCI.

Describe alternatives you've considered

Check issue #16 for more info.

CircleCI -> GitHub Actions Transition

Is your feature request related to a problem? Please describe.
CircleCI does not offer a good user experience for ECR ECS deployment.
Describe the solution you'd like
Transfer the existing tests to GitHub actions

Describe alternatives you've considered
We have considered sticking with CircleCI but at this point, GitHub actions offers more features we are interested in utilizing.

Additional context
N/A.

Configure test coverage for frontend and api

Is your feature request related to a problem? Please describe.
Configure unit test code coverage for frontend and backend.

Describe the solution you'd like
Collect code coverage on branches and lines for frontend and backend unit tests as well as a way for CI to fail if a certain threshold is not met.

Describe alternatives you've considered
N/A

Additional context
N/A

Implement JWT generation in backend on successful CAC authentication

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Implement CRL check as part of backend login handler

Is your feature request related to a problem? Please describe.
As a system, I want to check the list that is stored in our environment so I can deny access.
#79 dependent

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Mechanism for injecting server certificate into NGINX container and worker container

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

  • circleCI environment variable?

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Create Hello World Back-end Django App

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Include linting and and at least one test.

Describe alternatives you've considered
The Mon Cala team considered Node, Django and Spring because of the proprietary eXML converter written in Java.

Additional context
n/a

Create diagram outlining CI/CD pipeline

Is your feature request related to a problem? Please describe.
N/A

Describe the solution you'd like
An easily digestible showing the CI/CD pipeline steps in order for inclusion in SSAG.

Describe alternatives you've considered
N/A

Additional context
N/A

Establish SOLO domain name

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
2 domain names provisioned in Route 53

Describe alternatives you've considered
N/A

Additional context
N/A

Add Code Test Coverage to CI/CD Pipeline

Is your feature request related to a problem? Please describe.
After the code coverage test is created, it needs to be added to the CI/CD pipeline.

Describe the solution you'd like
Modify the CircleCI config.yml file to include testing the code coverage.

Describe alternatives you've considered
Code coverage could also added to an existing command which already runs in the pipeline. If this is done, the pipeline should indicate the existing command also tests the code coverage.

Additional context
N/A.

Create Git workflow chart for Mon Cala contributing

Is your feature request related to a problem? Please describe.
Creating a git flow chart for developer actions dealing with coding to issues and merging commits. This chart will be added to SSAG.

Describe the solution you'd like
A flow chart using standard symbols.

Describe alternatives you've considered
Alternatives include descriptions using text.

Additional context
NA

Determine expected user traffic

Research

In order to determine cost and scalability requirements, an estimated transaction volume is required from GCSS users.

Recommendation

N/A

Action

N/A

Screenshots

N/A

Software Architecture Initial Draft

Is your feature request related to a problem? Please describe.
We need an initial draft of the software architecture to show DDS experts, and gather feedback for improvements prior to adding it to our SSAG for A&A approval, and move forward with development.
Describe the solution you'd like
A clear and concise software architecture draft which best illustrates what we plan to do for this project.

Describe alternatives you've considered
This is a prescriptive step to guide Mon Cala towards getting the initial IATT, and eventually ATO.

Additional context
N/A.

Verify CAC authentication will work via Nginx configuration

Is your feature request related to a problem? Please describe.
CAC authentication is required to verify clients

Describe the solution you'd like
Prompt for valid DoD CAC certificate when accessing the frontend

Describe alternatives you've considered
N/A

Additional context
N/A

Configure CircleCI to run an auto-deployment to the staging environment

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Create initial postgres DB

Is your feature request related to a problem? Please describe.
Create the initial connection to a postgres DB for local testing.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Decide on container registry

Research

Look at DI2E

  1. Red hat Quay
    -TLS Encryption Support
    -Automatically conducts security scans on container images

Recommendation

Provide a recommendation based upon the research.

Action

Describe the action taken.

Screenshots

Attach relevant screenshots here.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.