redhat-cop / pathfinder Goto Github PK

Please add Business Criticality value in Question 1 in the Results screen.

As a developer, I want to build, run, and test Pathfinder.

Enable the user to modify the survey answers by pre-populating the survey with the previous answers

As an application assessor in conjunction with the application owner I want to be able to designate an application to be cloud native, suitable for migration (lift and shift), suitable for modernisation (some rewrite) or not-container suitable

https://trello.com/c/85tzFKHv/28-as-an-application-assessor-in-conjunction-with-the-application-owner-i-want-to-be-able-to-designate-an-application-to-be-cloud-n

As a business owner I want to be able to see the overall progress of the customers assessment work with the count of the number of applications assessed, in progress and not started

https://trello.com/c/UCGZXoki/20-as-a-business-owner-i-want-to-be-able-to-see-the-overall-progress-of-the-customers-assessment-work-with-the-count-of-the-number

As an application assessor in conjunction with the application owner I want to be able to add assessment notes, decisions and recommendations to the application assessment

https://trello.com/c/zRTtaZA8/30-as-an-application-assessor-in-conjunction-with-the-application-owner-i-want-to-be-able-to-add-assessment-notes-decisions-and-rec

https://trello.com/c/Ld2nSOwx/51-render-suitability-loe-and-prioritization-of-onboarding-to-ocp-into-ui

As an application assessor, I want to learn how to use Pathfinder.

/api/pathfinder/customers/<customer_id>/applicationAssessmentProgress

and the fields are:
app count
assessed count
reviewed count

As a business or application owner I want to be able to view application assessments which have questions that have "unknown" answers

https://trello.com/c/hjqS2YQc/38-as-a-business-or-application-owner-i-want-to-be-able-to-view-application-assessments-which-have-questions-that-have-unknown-answ

Move the index.html and survey.js files. Pathfinder should not serve any ui artifacts

As an admin user I want to be able to assign users to roles e.g. business owner, application assessor, application owner

https://trello.com/c/8WurFuNz/15-as-an-admin-user-i-want-to-be-able-to-assign-users-to-roles-eg-business-owner-application-assessor-application-owner

As a business owner I want to be able to view the breakdown of applications by business priority

https://trello.com/c/sQoZXiu0/34-as-a-business-owner-i-want-to-be-able-to-view-the-breakdown-of-applications-by-business-priority

10 Customer, 500 apps and associated assessments and reviews

Similar to deleting customers but the data is retained. The customer however is disabled.
Need to consider how this works with Auth/Authz as well. Need ability to reactivate customers as well

As an architect I need to understand the architecture design for Pathfinder in order to assess feasibility of proposed changes.

As a consultant I want to be able to select industry specific question sets e.g. FSI, Telco

https://trello.com/c/rgA5fpPK/48-as-a-consultant-i-want-to-be-able-to-select-industry-specific-question-sets-eg-fsi-telco

As a business owner I want to be able to assign an application assessment to an application owner

https://trello.com/c/O8D7VtJm/21-as-a-business-owner-i-want-to-be-able-to-assign-an-application-assessment-to-an-application-owner

The current mongodb key generation policy uses incrementing ids. This can be used to get access to data by just incrementing the ids. This should be changed to use a UUID value. See https://www.mongodb.com/blog/post/generating-globally-unique-identifiers-for-use-with-mongodb

RBAC on resources, customers only able to see their customer data.
How do we associate logins to individual customers, how do we create customers ?
What controls do we want on individual resources ?

Critical for security, OSE passthrough and terminated at the application

As a consultant, I have guidance inside or outside the tool that tells me how to complete this assessment process.

The methodology is published in some form so consultants can learn and understand it outside the specific implementation in any tool (e.g. nomenclature and artefact explanations within the tooling).

A scorecard application guides a consultant or customer through the methodology to determine its outputs (including for example workload name, suitability, level of effort, and prioritization).

https://docs.google.com/document/d/1psn4PtxuJBn_GT2lKyobtAxpC49OvdO63bRMVvJmL0g

https://trello.com/c/glGwxV5H/7-as-a-consultant-i-have-guidance-inside-or-outside-the-tool-that-tells-me-how-to-complete-this-assessment-process

Feedback from Scott McCarthy

1. I noticed that might be useful to add would be around "Isolation" - similar to slide 12 [2]. Does it need process, container, virtual machine, physical machine, rack level, or data center level isolation? This could be for the main application or for a disaster recovery copy of the application. The question would apply to both the isolation of the main application or the DR copy.

For example, often corporate IT will isolate web service (dns, httpd, etc) applications in a separate VMware cluster from internal services (Oracle DBs, SAP, etc). This means, they trust virtualization, but not as much as they think. Subconsciously, sadly, many customers have made a design decision to isolate at the rack level by separating these groups of applications in separate physical clusters. Then for the DR copies of each, they will typically have different VMware clusters at the DR location, or fail over to separate VPCs in AWS.

Happy to have a quick call to discuss, but really that's the only major thing I see possibly missing...

2. Application restarts - can the application be killed and restarted cleanly. Some applications will restart very easily, like Apache/Nginx. Others can get much more finicky and crash or corrupt data, like MySQL, or Oracle Databases.

3. per CONFIG, I think this could be made a bit more sophisticated to include a question around if config files are changed by the application itself. For example, there are admin interfaces on a lot of software and they assume that they can write data and change the config. These files can sometimes be located all over the filesystem which makes them difficult to containerize.

4. Installation - source code compile, packages (RPM), installer script which can be reverse engineered, installer script which cannot be reverse engineered

5. The COMMS question doesn't capture raw TCP/UDP as a potential protocol. It also doesn't capture point to point encryption between containers (real request from BofA a while back). These make it more challenging to containerize

6. I would capture something around code/configuration/data. For example, MySQL has /usr/bin/mysqld, /etc/my.cnf /var/lib/mysql so it is really easy to containerize. Satellite 6, on the other hand, has about 75 configuration files, 20 storage directories, and 10 binaries. It makes it VERY difficult to put in a read only container with good bind mounts. Some apps are even worse. Many proprietary apps write data into strange places like /etc.

The RTI score(s) can then be shown within the Pathfinder app.

Need to add

<a href="https://www.openshift.com/" title="Powered by OpenShift Online">
  <img alt="Powered by OpenShift Online" src="https://www.openshift.com/images/logos/powered_by_openshift.png">
</a>

Get process feedback from @nunnchops

As a consultant, I want the assessment tool to integrate with existing Red Hat Application Migration and Modernisation initiatives and solutions.

The scorecard will attempt to integrate with existing Red Hat Application Migration and Modernisation initiatives and solutions (identifying potential candidates based on scorecard criteria and output).

https://docs.google.com/document/d/1psn4PtxuJBn_GT2lKyobtAxpC49OvdO63bRMVvJmL0g

https://trello.com/c/vM63ZVz2/10-as-a-consultant-i-want-the-assessment-tool-to-integrate-with-existing-red-hat-application-migration-and-modernisation-initiative

As a customer/consultant, I want the assessment tool to be deployable in the customer's data center.

https://trello.com/c/g54kWlSl/8-as-a-customer-consultant-i-want-the-assessment-tool-to-be-deployable-in-the-customers-data-center

As a business owner I want to be able to view the entire application landscape in categories of cloud native, modernisable and unsuitable for containers

https://trello.com/c/ZwqccGuZ/36-as-a-business-owner-i-want-to-be-able-to-view-the-entire-application-landscape-in-categories-of-cloud-native-modernisable-and-un

As a business owner I want to be able to view the breakdown of applications by work effort

https://trello.com/c/iMOVq5jk/33-as-a-business-owner-i-want-to-be-able-to-view-the-breakdown-of-applications-by-work-effort

Ability to CRUD customers
Ability to view statistics on customers, associated applications and reviews

The underlying survey.js framework has a timeSpent property on the survey object.
This contains the amount of time the user has spent on the survey. This value should be stored as its an important metric to track.

As an application assessor I want to be able to clone a previous completed application assessment responses in order to handle similar applications

https://trello.com/c/p4s50Hdn/27-as-an-application-assessor-i-want-to-be-able-to-clone-a-previous-completed-application-assessment-responses-in-order-to-handle-s

As an application assessor I want to be able to view extra help on assessment questions in case of confusion over the understanding of the questions

https://trello.com/c/K1Cvq6Ju/26-as-an-application-assessor-i-want-to-be-able-to-view-extra-help-on-assessment-questions-in-case-of-confusion-over-the-understand

As a business owner I want to be able to view the breakdown of applications by dependency order

https://trello.com/c/xzpthRgm/35-as-a-business-owner-i-want-to-be-able-to-view-the-breakdown-of-applications-by-dependency-order

/api/pathfinder/customers/<customer_id>/assessmentSummary

returns all apps associated with a customer

and the fields are:
App id
App name
assessed ("Yes" if there's one or more assessments associated with app, otherwise "No")
reviewed (Yes or No)
Business Priority (numeric)
Decision (Rehost/Replatform/Refactor/repurchase/retire/retain)
Effort (Small, Medium, Large, Extra Large)
review date (2018-03-14 03:23:29pm)
last assessment id associated with app