2025-11-27

  • 5803:
    • prep next stage, removing secrets-...-KID as well and -Name
    • chase cli PR into release
  • outstanding PRs
    • closed dependabot middy/validation due to upstream
    • README
    • proxygen issue about marking pr deploys temp (Ant)
    • close the strict module imports (for now)
  • record time in Jira and Airecentre

2025-11-26

  • 5803:
    • another rubber duck and more pain dealing with secrets I cannot read in int
    • finally resolved by understanding the private key in qa had never been used, copying the one from int
    • chase thru the testing and further differences to ensure PSU working in qa
    • unblock the release cut
  • 5803 and 5977: chasing logging changes thru the PR process.

2025-11-25

  • 5901
    • cdk:
      • need to spend some time familiarising, and using
      • what are the ‘utils’ Ant is talking about?
    • on hold
  • 5977: investigate with Connor, ended with us both doing it.
  • 3344:
    • meet with Rishi and Vikas, they made changes to fix us (onbarding portal displaying PR endpoints)
    • further issues once Kayal got the token working
  • 5803:
    • fix review comments

2025-11-24

  • Catch up with Connor: dumped all my PRs on him !
  • 3344
    • minor issue in Jenkins, Phil says submitting now
    • ran thru Kop108 with Kayal, no dice
    • Rishi has set up call for tomorrow.
  • decision mtg
  • 5901
    • cdk direct?

2025-11-21

  • 3344:
    • work with Phil and Jono on spine change
    • attempt to run on existing laptop
  • timesheet: airecenter and Jira
  • Kayal on creating delegated access tokens
  • bought new laptop and thumb drive

2025-11-20

  • 5803
    • allowed myself to be talked into ‘just use old value’
      • didn’t work
      • added shell wrapper to read secrets

2025-11-19

  • sprint review
    • delta
      • threat led assessment, spreadsheet attached to delta team board
      • HL7v3 / FHIR mapping table for dispensers (page on confluence)
        • tickets for corrections (abused fields -> extensions basically)
  • digi meds
    • Frontline productivity catalogue
      • ambient voice recrding is a big bet

      • 50% out of acute trusts

      • challenge of balancing regional autonomy with central priorities
        • cyber is fixed, maybe 10-20% flexibility on other areas
  • planning
    • non-functional tests
      • would prefer pharmacies to submit as they go but for historical reasons batch at end of month
  • 0000: complete optimisation of qc
  • 0000: refactoring psu to inject deps and provide cli
    • failed SQ coverage
    • copilot wrote tests, still fail coverage
    • exclude cli from coverage :-)

2025-11-18

  • 5993: passed and closed
  • 5970: expand logging
    • ready for review
  • 5803: still failing!
    • call for help
  • 3344: outstanding
  • 5995: reporting conversation

2025-11-17

  • 5993:
    User: arn:aws:sts::399793560585:assumed-role/psu-Functions-ZK9K4HF7LRZ2-UpdatePrescri-LambdaRole-0Y05Ra0EMsYM/psu-UpdatePrescriptionStatus is not authorized to perform: ssm:GetParameter on resource: arn:aws:ssm:eu-west-2:399793560585:parameter/psu-TEST_PRESCRIPTIONS_1
  • 5803: pursue testing, release cut
  • 5970: expand logging
  • 3344: do the spine change
  • 0000: complete optimisation of qc
  • 5995: reporting conversation
    • DPS is deprecated
    • Stuart Baskeville is product owner of new thing TIE? TRE?
      • Data bricks

2025-11-14

  • optimise qc:

    • account resources
      • baseline: 5m 26s
      • optimised:
        • the rest: 4m 14s
        • cloudformation-validation: 2m 3s
    • psu
      • baseline: 8m 9s
      • optimised
        • the rest: 6m 26s
        • cloudformation-validation: 1m 41s
    • eps-storage-terraform
      • baseline: 2m 31s
      • optimised
        • the rest: 2m 55s
        • cloud-formation: 9s
    • electronic-prescription-service-release-notes
      • baseline: 3m 8s
      • optimised
        • the rest: 2m 54s
        • cloud-formation: 54s
    • eps-assist-me
      • baseline: 3m 6s
      • optimised
        • the rest: 3m 2s
        • cloud-formation: 34s
    • electronic-prescription-service-clinical-prescription-tracker
      • baseline 5m 55s
      • optimised
        • the rest: 5m 34s
        • cloudformation: fail
    • eps-FHIR-validator-lambda
      • baseline: 5m 34s
      • optimised
        • the rest: 5m 23s
        • cloud-formation: 51s
    • validation-service-fhir-r4
      • baseline: 4m 41s
      • optimised
        • the rest: 4m 52s
        • cloud-formation: 5s
    • electronic-prescription-service-get-secrets
      • baseline: 4m 41s
      • optimised
        • the rest: 2m 8s
        • cloud-formation: 6s

  • 3344:

    • get access to confluence
    • and jenkins
    • download VM (space!)
      • consolidate multiple downloads dirs

  • 5803

    • psu secrets approved, need to test!

  • submitted timesheets x2

  • ensure kvm installed:

2025-11-13

  • Ask Ant to revise Prescription_Notifications_Status_Report (break down by date and ODS code) and add ‘Notification frequency distribution by ODSCode’ to splunk
  • 5803:
    • get approved
    • test
  • 5970
    • chase approval
  • reporting
    • optimise memory (both reports)
    • optimise logging to not need expansion
  • prep spine log change

2025-11-12

  • 5970: incorporate review comments
  • talk to Alison about spine logging
  • try to optimise quality checks
    • baseline: 8m 9s
    • break out CF guard:
      • succeeded 21 minutes ago in 1m 45s
      • remainder: succeeded 16 minutes ago in 6m 20s
  • 1.5h on affinity sorting user interview data

2025-11-11

  • 5803
    • add the api secret as well, might as well treat all the same
    • KMS
    • prep PR to remove from acccount resources

2025-11-10

  • 5803:
    • discuss at rubber duck:
      • no need for all secrets to be in account resources
      • KIDs are not secrets
      • hence move to PSU and potentially change to param store
    • implement
  • UCD observation

2025-11-07

  • 5803:
    • chasing, ultimately identifying the issue that secrets implicitly available in parent workflows have to be declared on called workflows, unless inherit, which has its own issues.
  • 5934
    • good catch up with Pete
  • UCD
    • observation

2025-11-06

  • spine change
  • 5934
  • UCD
    • observation
  • 5803:
    • Connor set GH secrets
    • debugging failure to set secrets
    • found we both missed that the params were on the wrong sub-module
    • chase qa value
    • run deploy to environments, should we remove secrets?

2025-11-05

2025-11-04

  • rebuild devcontainers again
    • found a way to supply my docker gid but work fine with default
  • planning
    • could combine proxygen with delegated access depending on Rishi convo
  • 5913: reviewed Connor’s PR
    • rubber duck race condition with his GHA
  • 5803
    • need someone with prod access, if not Connor then Rubber Duck tomorrow

2025-11-03

  • issue with mic (90mins, not recorded on AL time)
  • 5803: unsigned, fix and push
    • merged, but…
    • don’t know what the right values are supposed to be => rubber duck
  • reviews
    • 5851: Connor’s PR failed on cloud formation rollback, tried delete and recreate but no dice.
  • ongoing devcontainers…
    • devcontainer PRs separated out because of getent, won’t work on windows
      • encapsulated in Dockerfile but need to add build arg DOCKER_GID=999 to devcontainer json
        • not supported as devcontainer cli arg apparently (could perhaps run docker cli)
  • 5947: proxy access
    • TODO Q: confirm ok to log NHS number? (already done before this PR)
    • 4 weeks for proxy access
    • need to get the spike done
    • 1 day to finish 5803
    • ask on dev channel
  • ITOC catch up