SRE/Infrastructure Foundations/OKR
Our objectives and areas of focus
We follow a structured approach to our work, centering around the objectives we set on an annual basis. Each quarter, we establish Key Results (KRs) that serve as milestones, guiding our progress towards achieving these objectives.
For Q2 fiscal year 2023/2024, we have identified following key objectives that encompass our strategic focus.
1. Achieve comprehensive observability by fully deploying OpenTelemetry Collector in production, enabling data transfer from Envoy Services Proxy, and supporting other teams in adopting trace context header propagation for MediaWiki services
2. Improve network redundancy and reliability by migrating existing A-B uplinks to the new spine switches.
3. Enhance the provision script in Netbox to accommodate and support complex host network configurations effectively.
4. Successful migration to Puppet 7
5. Improve OpenLDAP migration process and application packaging.
6. Successfully transition further roles to nftables to strengthen network security and improve overall infrastructure.
7. Enhance DDoS prevention and early detection
8. Implement Network Automation using gNMI for SONiC platform
9. Ensure the successful transition of Ganeti hosts to basic router behavior, enabling VM communication and external resource access through hypervisor-provided routing.
10. Streamline server migration by developing automation to move servers in Netbox from old to new switches.
11. Establish a comprehensive secret store solution strategy and implementation plan for centralised secrets management across the organisation.
12. Improve the security and reliability of backup systems through the implementation of a robust Public Key Infrastructure framework.
13. Optimize public cloud usage and streamline public cloud operations
14. Ensure a robust and easily configurable development environment for the infrastructure, promoting a seamless software development cycle while minimizing resource consumption. The ideal environment should be easy to set up, configure, adapt, and disposable.
15. Introduce a new postfix mail server with the objectives of improving security (addressing exim's security challenges), simplifying operational tasks, and enhancing spam detection capabilities.