Meeting 19.05.24

[Exand0]

TODO

• Unit Testing vs Integration Testing to use in the Pipeline?
  • Availability/Infra
  • Usability Scans @Moon36 - POSTPONED
    • integration-test-spike branch
  • Integration Test @Exand0
    • Check how CD to cluster would
    • Do the actual integration test with playwright - own container

Helm Charts - Secrets @Exand0

• DBs - Pwd
• Email-Server - Pwd
• Check upstream repos

Helm Charts - Storage @Moon36

• Backend only

• For images

• Check upstream repos

• Vulnerabilities Scanning?

  • Build and Push separately @eiskasten DONE
  • Separate Severity
    • Backend - high + severe
    • Frontend - only severe are relevant
      • Matrix action will probably have to be splitted
    • Protection for merging into main - both artifacts should work TODO + ADR
    • if one of both artifacts builds fails (the build for another artifact should not be automatically cancelled) TODO + ADR

• Fix backend transaction errors after Spring Boot upgrade @deoknats861

• Backend Dockerfile? @Moon36

  • Backend - use different user? TODO

• Separate H2 DB @deoknats861

• Combine compose files into one usable before - Optional

• Github SSO TODO

• Ask user to input required infos

• Only SSO-case should be handled, no migration from "pre-SSO"

• DBs Dockerfile

  • How to handle existing data on upgrade (Migration?) Where to keep data during downtime
  • Good question for instructor meeting

• latest-tag for images

• Frontend done @eiskasten DONE