2020-09-03 - Meeting Notes

Owned by Diana Antova
Last updated: Sept 03, 2020
3 min read

Date

  

Attendees

Steven Maglio
(tick) 
Ian Lessing (Unlicensed)



Vince Nievares
(tick)
Kevin Wu
(error)
Diana Antova
(tick)
Reinard Dolleschel(error)
christian.montecino (Unlicensed)(tick)

Goals

  • Updates on continuing development
  • Review, organize and add to work items


Focus points for this meeting

General update

Discussion items

TimeItemWhoNotes
Welcome
  • Greetings and salutations

Vacations

Retiring a Service
  • Employee Map API -  
    • Amazing!

BARC API server
  • BARC API server 
    • security will be enhanced on the BARC API Server
    • currently it uses basic authentication
    • Christian talked to Noah Baker, he provides the campus CAS (Oauth) person
    • class-code API comes from there
    • More APIs will be published in Apigee from the BARC API server

Nintex
  • Will be using APIs in Apigee
  • POC project
  • Yaheya, Steven, James will be researching it
  • we are not going to get JWT token from campus

Drupal Consultant
  •  - Yaheya is working on the Statement of Work with the contract company
    • Work will be for 1000 hours (about 6 months)
      • It's 9 hours a day, so 45 hours a week
    • Will have full record in UCPath (so they will be in Identity)
    • Diana will be the hiring/recording manager, Yaheya will be the point of contact with the contract company
    • Within 30 days, we need to let Yaheya know if things are not working out
    • If we are thinking that the work will end early, we need to give the contractor 30 days notice
    • The working hours are 2 AM to 11 AM PST/PDT.
    • There should be daily contact
    • The start date won't be decided until the contract is signed/completed
  •  - Steven and Ian will look into setting up Lando on Steven's machine
  •  Navodit is waiting for an account and a computer from ETS. 

Developer Portal Migration to Drupal 8Ian Lessing (Unlicensed)

Notes: Drupal 8 Migration Notes

Links:

 To begin this work in September with the Drupal consultant



API SecurityDiana Antova

Reports and alertsDiana Antova 

 Splunk2 might be ready in 2 weeks

 Still waiting to hear from Thomas Howard


Student Developed Applications

 Conversation with Registrar about student API use. 

 Diana Antova Emailed CSO to start the security conversation in regards to liability and oversight on student developed apps.

 Will meet with Jennifer Lofthus, SCO and Registrar to discuss student development with APIs. Scheduled for  

 Diana and Anthony Schmidt will write the two possible options for supporting student development and propose them to the group, CIO, and others for decision

 No update

 Steven Maglio will schedule a meeting

 New application reps: Arthur and Henry Li

 Asked students to create a new application request for the web app so they don't have to use the same key. Steven is following up with them.

 Steven and Seth met with the students. They are continuing to grow the sites. Two new members of the team are taking over. Henry is graduating, Jimmy is staying.


Meeting and group focus year 2020
  • Project focus
    • Drupal 8  (see also Drupal 8 Migration High Level Requirements)
      • Site initial setup
      • Content migration
      • Redesign to have a more generic purpose (DevOps, development, etc.)
    • AWS 
    • Account cleanup automation
    • Identity integration and automation 
  • Apigee Support
    • 1 FTE on the apigee team to help with student development oversight and support
    • Now the students have to contact so many groups to have their accounts setup, an FTE can really help with that. Adding the functionality to developer.ucsb.edu to create accounts.
      • Drupal - OK to work with a student
      • For other projects like identity account creation and others it will be difficult to work with a students

New APIs
  • AD Management - my.ucsb.edu
  • AD Management - sa.ucsb.edu
  • Academics Graduate Programs
  • ETS - Gateway Management Console Authorization Roles
    • A companion to the GMC department chartfield API
    • This will contain "who has access to what" (all the role definitions that map netid to authorization for TOE/TOF/Travel/Business Financial Applications (BFS) that are using the espreSSO system) (this is the replacement of GMC's ALLN01)

Action items

  •