Fork me on GitHub
#dockside
<
2020-03-09
>
Michelangelo van Dam13:03:43

In this period of rapid transformations due to the spread of covid-19, especially within organisations that have no culture of remote workers, I got myself in a situation where the organisation I work for was not ready for remote work but forced itโ€™s employees to work from home.

Michelangelo van Dam13:03:25

What are some of the solutions you have seen succeed in these kind of situations?

Raj T13:03:41

communication, communication, communication.. and I don't mean email. Get everybody on slack / hangouts / teams - whatever works for you. Frequent audio and video chats as well.

James Heimbuck13:03:36

writing down decisions and when needed how they came about (links to meeting notes or whatever) in tickets that move development forward has been helpful personally.

James Heimbuck13:03:30

And of course I have to link to https://about.gitlab.com/blog/2020/03/06/resources-for-companies-embracing-remote-work/ being a GitLabber and all . .

๐Ÿ‘ 1
Michelangelo van Dam13:03:29

The organisation I currently work for is an enterprise that has shielded of all external connections in multiple layers of firewalls and network segregations where the approved communication tool is MS Teams, Sharepoint (only accessible from inside network) and E-mail.

Raj T13:03:08

I've never seen that before (just kidding! this is more the norm than not)

๐Ÿ˜‚ 1
Michelangelo van Dam13:03:31

@james.heimbuck oh, thatโ€™s a nice reference. Thank you for sharing

๐Ÿ‘ 2
Raj T13:03:46

but then as I always say - never let a good crisis go to waste!

Raj T13:03:15

see how much you can use this to (securely) open up those tools to be accessible outside the network.

Aniella Arantes13:03:56

Do you have remote access to your machines?

Michelangelo van Dam13:03:01

@raj already started the discussion about VPN access, even on pool devices or via a Citrix session, but the earliest I got it on the agenda was 2021

Michelangelo van Dam13:03:45

@aniella nope, not even within the network. Only through allowed devices

David Blanchet13:03:34

A suggestion is to organize a short phone meeting with your peers (because of the limitations if you can video Skype, it would be best) to discuss what they are going to do with their teams? The idea is to share and form a great way to go forward. Then execute and then share again to refine.

Raj T13:03:00

Teams should be accessible remotely without a VPN. access can be locked down to managed devices and further secured with MFA if necessary.

Alex van Assem13:03:08

This makes the COVID-19 not only a threat, but also an opportunity to prove remote working is a feasible option.

2
Michelangelo van Dam13:03:39

@david.c.blanchet yes, I was thinking along those lines by taking baby-steps to see what works and what doesnโ€™t early in the process.

Raj T13:03:40

agree with @david.c.blanchet re starting the conversationw ith your peers

Michelangelo van Dam13:03:42

and I have all the support from the digital teams (dev, ops, sec, qa, and so on)

๐Ÿ‘ 1
Michelangelo van Dam13:03:53

I just need to find solutions that would help us move forward without stepping too hard on the toes of those who are keepers of the keys (political plays are real)

Michelangelo van Dam13:03:20

One victory I already had was having Skype for business to be accepted as an officially allowed tool as it can be considered part of MS Teams (which was already allowed).

David Blanchet13:03:26

I have had good experiences with bringing peers together in a crisis. Lots of innovative thinking happens, and you might find some way to bring in better ways to communicate once you are all back in the office. This should be exciting for you and your peers. Good luck! I am here if you would like to discuss.

Michelangelo van Dam13:03:07

Another victory I had was to allow internal Jenkins build to be triggered by external Bitbucket webhooks, even though we had to set up an application gateway at the DMZ to control access. But itโ€™s a win

๐Ÿ‘ 2
Michelangelo van Dam13:03:31

@david.c.blanchet much appreciated

๐Ÿ˜€ 1
Michelangelo van Dam13:03:20

My goal is to make everyone in the organisation as effective as possible, no matter if they are in or outside company network.

Michelangelo van Dam13:03:48

and I have the backing of my peers and some business sponsorship

Michelangelo van Dam13:03:00

I will come back to the dockside to provide updates on the progress weโ€™re making. As @raj said: we cannot let a good crisis go to waste ๐Ÿ˜„

๐Ÿ‘ 4
Aniella Arantes14:03:14

Humn, I would gather the network team and create a vlan for the desktops and allow access to them only with specific firewall rules that allow external connections . Keeping the other machines (servers, prod env ) segregated from this group

Aniella Arantes14:03:06

Redesigning the network together with the security team may be a good solution but I donโ€™t know the specifics of your context.