(process_sre_creation)=

# SRE creation

## Purpose

A secure research environment (SRE) is needed for each project.
This is the compute environment that the {ref}`project team <role_project_team>` use to carry out the work.
The purpose of this document is to define how and when SREs should be created.

## Scope

This procedure covers SRE creation for all projects running in the Turing TRE.

## Responsibilities

:::{table}
:widths: auto
:class: responsibilities

| Role | Responsibility |
| ---- | -------------- |
| {ref}`role_trusted_research_sysadmin` | Deploying and testing the DSH SRE |
| {ref}`role_trusted_research_data_manager` | Logging the SRE creation |

:::

## Procedure

:::{mermaid}
:name: Process flowchart
:align: center

   flowchart TD
      shm(🧑‍🔧 Confirm SHM)
      sre(🧑‍🔧 Deploy SRE)
      test(🧑‍🔧 Test SRE)
      log(🧑‍💻 Log SRE creation)
      shm-->sre
      sre-->test
      test-->log

      classDef trusted_research_sysadmin fill:#f8cecc,stroke:#b85450;
      classDef trusted_research_data_manager fill:#dae8fc,stroke:#6c8ebf;

      class shm,sre,test trusted_research_sysadmin;
      class log trusted_research_data_manager;
:::

1. **Confirm DSH management environment is set up**:
   - **Responsible:** {ref}`role_trusted_research_sysadmin`
   - If an existing DSH management environment exists:
     - Confirm that you are able to access it.
     - Ask other {ref}`system administrators <role_trusted_research_sysadmin>` for help if needed.
   - If there is no DSH management environment:
     - Follow the {ref}`SHM deployment guidance <deploy_dsh_shm>`.

2. **Deploy a DSH SRE**:
   - **Responsible:** {ref}`role_trusted_research_sysadmin`
   - Follow the {ref}`SRE deployment guidance <deploy_dsh_sre>`.
   - Add the deployment logs to the **{menuselection}`logging`** folder in the Sharepoint folder for this project

3. **Test the DSH SRE**:
   - **Responsible:** {ref}`role_trusted_research_sysadmin`
   - Confirm that SRE passes the [DSH security evaluation checklist](https://data-safe-haven.readthedocs.io/en/latest/deployment/security_checklist.html).
   - Tell the {ref}`data managers <role_trusted_research_data_manager>` that SRE creation is finished.

4. **Log SRE creation**:
   - **Responsible:** {ref}`role_trusted_research_data_manager`
   - Move the GitHub issue tracking this SRE into the `Active long-term SREs and SHMs` column of the [TRESA - SRE board](https://github.com/orgs/alan-turing-institute/projects/25/views/1?layout=board)
   - Ensure that deployment logs are present in the **{menuselection}`logging`** folder on Sharepoint
   - Update the `all_users_and_projects.xlsx` spreadsheet in the **{menuselection}`information_governance`** folder on Sharepoint