<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Thu Feb 08 23:21:57 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[FOLIO-2612] Have a backup admin account on the hosted environments</title>
                <link>https://folio-org.atlassian.net/browse/FOLIO-2612</link>
                <project id="10290" key="FOLIO">FOLIO</project>
                    <description>&lt;p&gt;In order to compensate for situations where the &lt;tt&gt;diku_admin&lt;/tt&gt; account becomes unusable&lt;br/&gt;
without requiring dedicated DevOps support (because capacity and availability are very limited)&lt;br/&gt;
we could create a second admin account with less well-known credentials&lt;br/&gt;
that could be used to perform recovery actions e.g. unlock the account, fix the record etc&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Context&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;Recently (in the last week), there have been two outages for the &lt;tt&gt;folio-snapshot&lt;/tt&gt; environment&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;MODUSERBL-89&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/MODUSERBL-89&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Unrecognized field &amp;quot;customFields&amp;quot; (class org.folio.rest.jaxrs.model.User)&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10303?size=medium&quot; /&gt;
            MODUSERBL-89
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
 as &lt;tt&gt;diku_admin&lt;/tt&gt; due to custom fields not being handled by mod-users-bl&lt;/li&gt;
	&lt;li&gt;&lt;tt&gt;diku_admin&lt;/tt&gt; &lt;a href=&quot;https://folio-project.slack.com/archives/C58TABALV/p1590056027274000&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;locked out&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;&lt;b&gt;Future Possible Actions&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;I think this is a useful fallback measure, however it does not mitigate the primary concern, which is that (pretty much) everyone who uses the hosted environments uses the &lt;tt&gt;diku_admin&lt;/tt&gt; account. I think it could be worth considering generating other accounts for folks of these environments, and reserving this account for administration (or as a fallback).&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Interested Parties&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;I&apos;m including &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5af5ed55244bc90a106063c7&quot; class=&quot;user-hover&quot; rel=&quot;5af5ed55244bc90a106063c7&quot; data-account-id=&quot;5af5ed55244bc90a106063c7&quot; accountid=&quot;5af5ed55244bc90a106063c7&quot; rel=&quot;noreferrer&quot;&gt;Cate Boerema&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Af42d9c43-226d-4aa3-bb31-9b2dd07920aa&quot; class=&quot;user-hover&quot; rel=&quot;557058:f42d9c43-226d-4aa3-bb31-9b2dd07920aa&quot; data-account-id=&quot;557058:f42d9c43-226d-4aa3-bb31-9b2dd07920aa&quot; accountid=&quot;557058:f42d9c43-226d-4aa3-bb31-9b2dd07920aa&quot; rel=&quot;noreferrer&quot;&gt;Owen Stephens&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5af5e627525ba96b58654f12&quot; class=&quot;user-hover&quot; rel=&quot;5af5e627525ba96b58654f12&quot; data-account-id=&quot;5af5e627525ba96b58654f12&quot; accountid=&quot;5af5e627525ba96b58654f12&quot; rel=&quot;noreferrer&quot;&gt;Ann-Marie Breaux&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=615afd1cd9820f0070a09ef0&quot; class=&quot;user-hover&quot; rel=&quot;615afd1cd9820f0070a09ef0&quot; data-account-id=&quot;615afd1cd9820f0070a09ef0&quot; accountid=&quot;615afd1cd9820f0070a09ef0&quot; rel=&quot;noreferrer&quot;&gt;Zak Burke&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A2002428d-c11e-48c4-98e0-a5b1104bd0b6&quot; class=&quot;user-hover&quot; rel=&quot;557058:2002428d-c11e-48c4-98e0-a5b1104bd0b6&quot; data-account-id=&quot;557058:2002428d-c11e-48c4-98e0-a5b1104bd0b6&quot; accountid=&quot;557058:2002428d-c11e-48c4-98e0-a5b1104bd0b6&quot; rel=&quot;noreferrer&quot;&gt;Dima Tkachenko&lt;/a&gt; in this issue as they were involved in the previous issues&lt;/p&gt;
</description>
                <environment></environment>
        <key id="79675">FOLIO-2612</key>
            <summary>Have a backup admin account on the hosted environments</summary>
                <type id="10005" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium">Story</type>
                                            <priority id="10005" iconUrl="https://dev.folio.org/assets/jira-priority/tbd.svg">TBD</priority>
                        <status id="1" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/open.png" description="The issue is open and ready for the assignee to start work on it.">Open</status>
                    <statusCategory id="2" key="new" colorName="blue-gray"/>
                                    <resolution id="-1">Unresolved</resolution>
                                                        <assignee accountid="-1">Unassigned</assignee>
                                                                <reporter accountid="63e2a2771b13d42998e4e706">Marc Johnson</reporter>
                                    <labels>
                            <label>hosted-environments</label>
                    </labels>
                <created>Thu, 21 May 2020 11:14:34 +0000</created>
                <updated>Wed, 2 Sep 2020 11:29:17 +0000</updated>
                                                                                <due></due>
                            <votes>0</votes>
                                    <watches>6</watches>
                                                                <comments>
                                                            <comment id="189489" author="63e2a2771b13d42998e4e706" created="Thu, 21 May 2020 11:15:16 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5af5ed55244bc90a106063c7&quot; class=&quot;user-hover&quot; rel=&quot;5af5ed55244bc90a106063c7&quot; data-account-id=&quot;5af5ed55244bc90a106063c7&quot; accountid=&quot;5af5ed55244bc90a106063c7&quot; rel=&quot;noreferrer&quot;&gt;Cate Boerema&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ab8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; class=&quot;user-hover&quot; rel=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; data-account-id=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; accountid=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; rel=&quot;noreferrer&quot;&gt;Jakub Skoczen&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f9abc1eb45b2e007453f423&quot; class=&quot;user-hover&quot; rel=&quot;5f9abc1eb45b2e007453f423&quot; data-account-id=&quot;5f9abc1eb45b2e007453f423&quot; accountid=&quot;5f9abc1eb45b2e007453f423&quot; rel=&quot;noreferrer&quot;&gt;John Malconian&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5cd423bebc70090d6ce241b1&quot; class=&quot;user-hover&quot; rel=&quot;5cd423bebc70090d6ce241b1&quot; data-account-id=&quot;5cd423bebc70090d6ce241b1&quot; accountid=&quot;5cd423bebc70090d6ce241b1&quot; rel=&quot;noreferrer&quot;&gt;Ian Hardy&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c706fbb47a54a6728e59df2&quot; class=&quot;user-hover&quot; rel=&quot;5c706fbb47a54a6728e59df2&quot; data-account-id=&quot;5c706fbb47a54a6728e59df2&quot; accountid=&quot;5c706fbb47a54a6728e59df2&quot; rel=&quot;noreferrer&quot;&gt;Wayne Schneider&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=61cd0ca0bce5e00069e98be7&quot; class=&quot;user-hover&quot; rel=&quot;61cd0ca0bce5e00069e98be7&quot; data-account-id=&quot;61cd0ca0bce5e00069e98be7&quot; accountid=&quot;61cd0ca0bce5e00069e98be7&quot; rel=&quot;noreferrer&quot;&gt;David Crossley&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;What do you think to this idea?&lt;/p&gt;

&lt;p&gt;If you like it, what is needed for it to get prioritised?&lt;/p&gt;</comment>
                                                            <comment id="189491" author="5af5ed55244bc90a106063c7" created="Thu, 21 May 2020 12:44:02 +0000"  >&lt;p&gt;This sounds like a great, low-cost solution that would save devops time later.  Would the creation of this user need to be done by the devops folks on Core Platform?&lt;/p&gt;</comment>
                                                            <comment id="189493" author="63e2a2771b13d42998e4e706" created="Thu, 21 May 2020 13:40:12 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5af5ed55244bc90a106063c7&quot; class=&quot;user-hover&quot; rel=&quot;5af5ed55244bc90a106063c7&quot; data-account-id=&quot;5af5ed55244bc90a106063c7&quot; accountid=&quot;5af5ed55244bc90a106063c7&quot; rel=&quot;noreferrer&quot;&gt;Cate Boerema&lt;/a&gt;&lt;/p&gt;

&lt;blockquote&gt;&lt;p&gt;Would the creation of this user need to be done by the devops folks on Core Platform?&lt;/p&gt;&lt;/blockquote&gt;

&lt;p&gt;Yes, it would need to be done by the DevOps folks&lt;/p&gt;</comment>
                                                            <comment id="189495" author="5cd423bebc70090d6ce241b1" created="Thu, 21 May 2020 13:51:30 +0000"  >&lt;p&gt;I like the idea. One approach might be to modify to the ansible create-tenant-admin and tenant-admin-permissions role to take an array of users instead of one. The quick hack would probably be to just run those roles again w/different data in the build. These roles are used in both single server and k8s  builds.&lt;/p&gt;</comment>
                                                            <comment id="189497" author="557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d" created="Mon, 22 Jun 2020 13:25:13 +0000"  >&lt;p&gt;Returning back to the backlog since Mark won&apos;t be able to address it.&lt;/p&gt;</comment>
                                                            <comment id="189498" author="63e2a2771b13d42998e4e706" created="Wed, 15 Jul 2020 09:03:37 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ab8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; class=&quot;user-hover&quot; rel=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; data-account-id=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; accountid=&quot;557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d&quot; rel=&quot;noreferrer&quot;&gt;Jakub Skoczen&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5cd423bebc70090d6ce241b1&quot; class=&quot;user-hover&quot; rel=&quot;5cd423bebc70090d6ce241b1&quot; data-account-id=&quot;5cd423bebc70090d6ce241b1&quot; accountid=&quot;5cd423bebc70090d6ce241b1&quot; rel=&quot;noreferrer&quot;&gt;Ian Hardy&lt;/a&gt; &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f9abc1eb45b2e007453f423&quot; class=&quot;user-hover&quot; rel=&quot;5f9abc1eb45b2e007453f423&quot; data-account-id=&quot;5f9abc1eb45b2e007453f423&quot; accountid=&quot;5f9abc1eb45b2e007453f423&quot; rel=&quot;noreferrer&quot;&gt;John Malconian&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;When might there be DevOps capacity to make this change?&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10155"><![CDATA[FOLIO DevOps]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|hzx6m9:zn3</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Thu, 21 May 2020 12:44:02 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                </customfields>
    </item>
</channel>
</rss>