Coder Social home page Coder Social logo

services-team's Introduction

services-team

Task management for the Cal-ITP Services Team

services-team's People

Contributors

afeld avatar thekaveman avatar

Watchers

Hunter Owens avatar  avatar Evan Siroky avatar Marissa Rosemblat avatar machiko avatar Vyki Englert avatar Sarah Henry avatar  avatar

services-team's Issues

remove unused DNS records

There are a number of DNS records across the various domains that are likely no longer in use; task here is to do a one-time cleanup of those that are no longer in use.

cc 18F/dns#176

Align Cal-ITP.org styles with MobiMart

  • Review and match color (special attention to blacks and blues)
  • Review and match typography
  • Review and match navigation
  • Review and match buttons
  • Review and match footer
  • Review and ensure mobile UI matches
  • Create one shared Figma Library file that both sites can pull from

Staffing assistance

Leaving this issue intentionally vague — notes.

Placing under the Benefits repository for lack of a better place, and to make it easier to do Sprint Planning. Will likely move.

Clean up access to tools

Currently, there are a lot of people with admin access to a number of Cal-ITP tools like:

  • The @cal-itp GitHub organization
  • The Google Shared Drives

For better security, we should:

  • Limit access in a way that strikes a balance between least privilege and minimal friction
  • Create an offboarding checklist
    • Good way to get a handle on all the services people have access to
  • Creating agreed-upon guidelines about what constitutes sensitive information

Some of the above may warrant splitting out to their own issues.

Enforce 2FA for Cal-ITP GitHub

TLDR;

Cal-ITP GitHub will enforce Two-Factor Authentication (2FA) for all members starting Tuesday October 4, 2022.

Read more on GitHub: Securing your account with two-factor authentication

More information

As of August 25, 2022 - nearly half (22 of 58) members in Cal-ITP do not have 2FA enabled.

As a security and SaaS best-practice, Cal-ITP wants to ensure all GitHub resources are protected to the fullest extent possible, which includes using Two-Factor Authentication for user accounts. Read more about Requiring two factor authentication in your organization.

When the requirement is turned on, any member of Cal-ITP that does not have 2FA enabled will be removed from the organization and converted to an "Outside Collaborator". Read more about Converting from an organization member to an Outside Collaborator.

Update Services Team Handbook with CA/US Design systems

Background

Cal-ITP manages a number of online informational and service-oriented web properties, including applications and websites.

We strive to follow existing standards where possible, including in our approach to design. The Cal-ITP Services Team Handbook lacks context around the design systems we rely on and how we approach new design efforts.

As the Figma design environment is being cleaned up for Benefits as part of cal-itp/benefits#560, we should update the Handbook with some more detail around our thought and decision processes.

Resources

Refine Services Team Handbook

The goal of the Services Team Handbook is to answer:

Someone is putting something on the internet. How does it get there, from a budget, technical, etc. perspective? What are the standards, etc?

@vykster is looking for the document to be refined, then likely transferring ownership to CalTrans.

The TTS ATO checklist will be a good resource to pull from, as something similar I previously worked on.

This issue may be too large… Might make sense to split up into smaller chunks to focus on specific aspects of it.

TODOs

Create privacy policy checklist

Placing under the Benefits repository for lack of a better place, and for easier planning in our board. Will likely move.

For various Cal-ITP projects:

@vykster is looking for a checklist that says things like "If there's analytics, you need X and Y." Some of this may belong in a Terms of Service / Conditions of Use page instead. Resources:

add tips around scheduling across orgs

The contact sheet has calendar URLs, but there aren't instructions (that I'm aware of) around how to create or use them. Also, we may want to mention that many folks use Calendly for showing availability externally.

renew wildcard certificate - due 1/28/23

Seeing in our Benefits App Service Certificate configuration that the *.calitp.org certificate is expiring soon:

Screenshot 2022-12-02 at 10 44 46 AM

We can either:

  • Renew the certificate, or
  • Move away from using a wildcard certificate, instead moving to managed certificates through the respective platforms
    • Pro: Automatic renewal
    • Con: We would have a bunch of certificates managed a bunch of different ways

Acceptance criteria

  • The App Service Certificates view is no longer showing "expiring soon"
  • As of 1/29/23, we don't/shouldn't get a certificate warning when visiting *benefits.calitp.org

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.