Page MenuHomePhabricator
Create Task
Maniphest T345226

Switch developer account creation to Bitu
Closed, ResolvedPublic
Actions

Description

Checklist and log for moving from Wikitech to Bitu/IDM for signups.

Pages to update:

Details

SubjectRepoBranchLines +/-
Do not set $wgPasswordResetRoutes['domain']mediawiki/extensions/LdapAuthenticationwmf/1.41.0-wmf.28+0 -3
Do not set $wgPasswordResetRoutes['domain']mediawiki/extensions/LdapAuthenticationwmf/1.41.0-wmf.27+0 -3
Do not set $wgPasswordResetRoutes['domain']mediawiki/extensions/LdapAuthenticationmaster+0 -3
wikitech: Properly disable password resetsoperations/mediawiki-configmaster+1 -2
wikitech: Block account creation by sysops toooperations/mediawiki-configmaster+2 -0
wikitech: Disable password resetsoperations/mediawiki-configmaster+5 -2
gerrit: Link account creation to IDM.operations/puppetproduction+1 -1
Disable user creation on wikitechoperations/mediawiki-configmaster+9 -3
Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenNoneT189531 All Wikimedia developer services should use single sign-on
 OpenNoneT363125 sustainability of wikitech.wikimedia.org
 OpenNoneT161859 Make Wikitech an SUL wiki
 OpenSLyngshede-WMFT163478 Allow viewing/searching LDAP account creations including date
 ResolvedNoneT153821 wikitech.wikimedia.org missing from pageviews API
 OpenNoneT148048 Store Wikimedia unified account name (SUL) in LDAP directory
 OpentaaviT359428 Striker should use ID instead of username to identify SUL accounts
 OpenNoneT237773 Move Wikitech onto the production MW cluster
 ResolvedMarosteguiT167973 Move database for wikitech (labswiki) to a main cluster section
 ResolvedAndrewT188029 Move labswiki database to m5
ResolvedMarosteguiT282074 Audit labswiki grants
 ResolvedAndrewT282209 Enable connection from labweb1001/labweb1002 to s6
 DeclinedAndrewT282573 Move labweb/cloudweb hosts to private IPs
 ResolvedAndrewT284106 Replicate & sanitize wikitech data
 ResolvedAndrewT284108 Bring labswiki database tables up to date
 ResolvedLadsgroupT269348 wikitech database has almost all of its varbinary fields wrong
 DuplicateNoneT284736 Create views on labswiki on clouddb* hosts
 Resolved• BstormT287442 Create views for labswiki (wikitech)
 DeclinedNoneT237889 Install php-ldap on all MW appservers
 ResolvedtaaviT237890 Remove and empty useless user groups
 ResolvedJdforrester-WMFT196466 Remove 'shell user' right on wikitech
 DeclinedNoneT246405 On wikitech, make sysops unable to edit site JS, and then retire contentadmin
 OpenjijikiT292707 Migrate Wikitech to Kubernetes
 OpenNoneT359551 Replace wikitech as source of two-factor auth protection for developer accounts
 OpenFeatureNoneT359554 Use IDP for authentication in Striker
 StalledFeatureNoneT359590 Use IDP for authentication in Horizon
 OpenFeatureSLyngshede-WMFT359552 Enable self-service IDP two-factor authentication management
 OpenNoneT359820 Add developer account (un)blocking support to Bitu
 OpenAndrewT360795 Set up a bitu instance for codfw1dev
 OpenSLyngshede-WMFT362128 Site: 1 VM for codfw1dev bitu deployment
 ResolvedABran-WMFT362619 Database request for Bitu Cloud DEV installation
 ResolvedtaaviT360883 Disable email address changes in Wikitech
 OpenNoneT364605 Move Striker to Bitu username validation API
 OpenSLyngshede-WMFT362318 Add Bitu container to Striker development environment
 ResolvedPRODUCTION ERRORTgrT195253 Special:Notifications gives a consistent PHP exception on load ("The trash icon is not registered") for users with OpenStackManager notifications
 OpenNoneT106123 Extensions needing to be removed from Wikimedia wikis
 Resolvedbd808T53642 Get rid of SemanticMediaWiki/SRF/SF from wikitech.wikimedia.org
 ResolvedyuvipandaT103995 Build a simple tool to query which instances have which roles / puppet variables
 Resolvedbd808T161662 Replace SMW data on project instances with a tool using the OpenStack APIs
 Resolvedbd808T162508 Implement Tool Labs membership application and processing in Striker
 Resolvedbd808T164787 Keystone permissions exception when trying to approve Tool Labs membership request via Striker
 OpentaaviT161553 Remove OpenStackManager from Wikitech
 ResolvedtaaviT196171 Developer account creation without OpenStackManager
 DeclinedNoneT179463 Create a single application to provision and manage developer (LDAP) accounts
 OpenNoneT319405 Create an IDM for Wikimedia developer accounts
 OpenSLyngshede-WMFT320801 Build-out for self service
 ResolvedSLyngshede-WMFT345226 Switch developer account creation to Bitu

Event Timeline

SLyngshede-WMF created this task.Aug 30 2023, 7:39 AM
SLyngshede-WMF updated the task description. (Show Details)
SLyngshede-WMF updated the task description. (Show Details)Aug 30 2023, 7:45 AM
SLyngshede-WMF triaged this task as Medium priority.Aug 30 2023, 1:05 PM
SLyngshede-WMF updated the task description. (Show Details)
gerritbot added a comment.Aug 30 2023, 1:06 PM

Change 952209 had a related patch set uploaded (by Slyngshede; author: Andrew Bogott):

[operations/mediawiki-config@master] Disable user creation on wikitech

https://gerrit.wikimedia.org/r/952209

gerritbot added a project: Patch-For-Review.Aug 30 2023, 1:06 PM
bd808 subscribed.Aug 30 2023, 9:24 PM
gerritbot added a comment.Aug 31 2023, 8:04 AM

Change 952209 merged by jenkins-bot:

[operations/mediawiki-config@master] Disable user creation on wikitech

https://gerrit.wikimedia.org/r/952209

Stashbot added a comment.Aug 31 2023, 8:04 AM

Mentioned in SAL (#wikimedia-operations) [2023-08-31T08:04:56Z] <ladsgroup@deploy1002> Started scap: Backport for [[gerrit:952209|Disable user creation on wikitech (T345226)]]

Stashbot added a comment.Aug 31 2023, 8:06 AM

Mentioned in SAL (#wikimedia-operations) [2023-08-31T08:06:33Z] <ladsgroup@deploy1002> ladsgroup and andrew: Backport for [[gerrit:952209|Disable user creation on wikitech (T345226)]] synced to the testservers mwdebug2001.codfw.wmnet, mwdebug1002.eqiad.wmnet, mwdebug1001.eqiad.wmnet, mwdebug2002.codfw.wmnet, and mw-debug kubernetes deployment (accessible via k8s-experimental XWD option)

Maintenance_bot removed a project: Patch-For-Review.Aug 31 2023, 8:10 AM
Stashbot added a comment.Aug 31 2023, 8:15 AM

Mentioned in SAL (#wikimedia-operations) [2023-08-31T08:15:03Z] <ladsgroup@deploy1002> Finished scap: Backport for [[gerrit:952209|Disable user creation on wikitech (T345226)]] (duration: 10m 06s)

SLyngshede-WMF updated the task description. (Show Details)Aug 31 2023, 9:13 AM
gerritbot added a comment.Aug 31 2023, 9:17 AM

Change 953967 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] C:gerrit Link account creation to IDM.

https://gerrit.wikimedia.org/r/953967

gerritbot added a project: Patch-For-Review.Aug 31 2023, 9:17 AM
JJMC89 added a project: wikitech.wikimedia.org.Aug 31 2023, 2:47 PM
JJMC89 moved this task from Backlog to Config on the wikitech.wikimedia.org board.
MoritzMuehlenhoff updated the task description. (Show Details)Aug 31 2023, 2:52 PM
MoritzMuehlenhoff added a comment.Aug 31 2023, 2:59 PM

I've rolled out CAS 6.6.11 with an additional patch which points to Bitu for password resets and signups.

gerritbot added a comment.Aug 31 2023, 3:02 PM

Change 954076 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/mediawiki-config@master] wikitech: Disable password resets

https://gerrit.wikimedia.org/r/954076

gerritbot added a comment.Sep 18 2023, 8:43 AM

Change 953967 merged by Slyngshede:

[operations/puppet@production] gerrit: Link account creation to IDM.

https://gerrit.wikimedia.org/r/953967

SLyngshede-WMF closed this task as Resolved.Sep 21 2023, 9:38 AM
SLyngshede-WMF updated the task description. (Show Details)
MoritzMuehlenhoff added a comment.Sep 21 2023, 10:19 AM

Gerrit still links to "https://wikitech.wikimedia.org/w/index.php?title=Special:CreateAccount&returnto=Gerrit/NewUser"

Stashbot added a comment.Sep 22 2023, 7:36 AM

Mentioned in SAL (#wikimedia-operations) [2023-09-22T07:36:36Z] <hashar> Restarting Gerrit to apply https://gerrit.wikimedia.org/r/c/operations/puppet/+/953967 "Link account creation to IDM" # T345226

hashar subscribed.Sep 22 2023, 7:40 AM

I have restarted Gerrit and the Sign up link now points to https://idm.wikimedia.org/signup/

gerritbot added a comment.Sep 26 2023, 8:45 AM

Change 961042 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/mediawiki-config@master] wikitech: Block account creation by sysops too

https://gerrit.wikimedia.org/r/961042

gerritbot added a comment.Sep 26 2023, 8:50 AM

Change 954076 merged by jenkins-bot:

[operations/mediawiki-config@master] wikitech: Disable password resets

https://gerrit.wikimedia.org/r/954076

gerritbot added a comment.Sep 26 2023, 8:50 AM

Change 961042 merged by jenkins-bot:

[operations/mediawiki-config@master] wikitech: Block account creation by sysops too

https://gerrit.wikimedia.org/r/961042

Stashbot added a comment.Sep 26 2023, 8:51 AM

Mentioned in SAL (#wikimedia-operations) [2023-09-26T08:51:12Z] <taavi@deploy2002> Started scap: Backport for [[gerrit:954076|wikitech: Disable password resets (T345226)]], [[gerrit:961042|wikitech: Block account creation by sysops too (T345226)]]

Stashbot added a comment.Sep 26 2023, 8:52 AM

Mentioned in SAL (#wikimedia-operations) [2023-09-26T08:52:38Z] <taavi@deploy2002> taavi: Backport for [[gerrit:954076|wikitech: Disable password resets (T345226)]], [[gerrit:961042|wikitech: Block account creation by sysops too (T345226)]] synced to the testservers mwdebug1002.eqiad.wmnet, mwdebug1001.eqiad.wmnet, mwdebug2001.codfw.wmnet, mwdebug2002.codfw.wmnet, and mw-debug kubernetes deployment (accessible via k8s-experimental XWD option)

Maintenance_bot removed a project: Patch-For-Review.Sep 26 2023, 9:10 AM
gerritbot added a comment.Sep 26 2023, 9:15 AM

Change 961051 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/mediawiki-config@master] wikitech: Properly disable password resets

https://gerrit.wikimedia.org/r/961051

gerritbot added a project: Patch-For-Review.Sep 26 2023, 9:15 AM
gerritbot added a comment.Sep 26 2023, 11:10 AM

Change 961051 merged by jenkins-bot:

[operations/mediawiki-config@master] wikitech: Properly disable password resets

https://gerrit.wikimedia.org/r/961051

Stashbot added a comment.Sep 26 2023, 11:10 AM

Mentioned in SAL (#wikimedia-operations) [2023-09-26T11:10:45Z] <taavi@deploy2002> Started scap: Backport for [[gerrit:961051|wikitech: Properly disable password resets (T345226)]]

Stashbot added a comment.Sep 26 2023, 11:12 AM

Mentioned in SAL (#wikimedia-operations) [2023-09-26T11:12:15Z] <taavi@deploy2002> taavi: Backport for [[gerrit:961051|wikitech: Properly disable password resets (T345226)]] synced to the testservers mwdebug1002.eqiad.wmnet, mwdebug1001.eqiad.wmnet, mwdebug2001.codfw.wmnet, mwdebug2002.codfw.wmnet, and mw-debug kubernetes deployment (accessible via k8s-experimental XWD option)

Stashbot added a comment.Sep 26 2023, 11:18 AM

Mentioned in SAL (#wikimedia-operations) [2023-09-26T11:18:46Z] <taavi@deploy2002> Finished scap: Backport for [[gerrit:961051|wikitech: Properly disable password resets (T345226)]] (duration: 08m 00s)

Maintenance_bot removed a project: Patch-For-Review.Sep 26 2023, 11:31 AM
gerritbot added a comment.Sep 26 2023, 11:39 AM

Change 961084 had a related patch set uploaded (by Majavah; author: Majavah):

[mediawiki/extensions/LdapAuthentication@master] Do not set $wgPasswordResetRoutes['domain']

https://gerrit.wikimedia.org/r/961084

gerritbot added a project: Patch-For-Review.Sep 26 2023, 11:39 AM
gerritbot added a comment.Sep 26 2023, 12:46 PM

Change 961084 merged by jenkins-bot:

[mediawiki/extensions/LdapAuthentication@master] Do not set $wgPasswordResetRoutes['domain']

https://gerrit.wikimedia.org/r/961084

gerritbot added a comment.Sep 26 2023, 12:53 PM

Change 960742 had a related patch set uploaded (by Majavah; author: Majavah):

[mediawiki/extensions/LdapAuthentication@wmf/1.41.0-wmf.27] Do not set $wgPasswordResetRoutes['domain']

https://gerrit.wikimedia.org/r/960742

gerritbot added a comment.Sep 26 2023, 12:53 PM

Change 960743 had a related patch set uploaded (by Majavah; author: Majavah):

[mediawiki/extensions/LdapAuthentication@wmf/1.41.0-wmf.28] Do not set $wgPasswordResetRoutes['domain']

https://gerrit.wikimedia.org/r/960743

ReleaseTaggerBot added a project: MW-1.41-notes (1.41.0-wmf.29; 2023-10-03).Sep 26 2023, 1:01 PM
gerritbot added a comment.Sep 26 2023, 8:29 PM

Change 960742 merged by jenkins-bot:

[mediawiki/extensions/LdapAuthentication@wmf/1.41.0-wmf.27] Do not set $wgPasswordResetRoutes['domain']

https://gerrit.wikimedia.org/r/960742

gerritbot added a comment.Sep 26 2023, 8:29 PM

Change 960743 merged by jenkins-bot:

[mediawiki/extensions/LdapAuthentication@wmf/1.41.0-wmf.28] Do not set $wgPasswordResetRoutes['domain']

https://gerrit.wikimedia.org/r/960743

Stashbot added a comment.Sep 26 2023, 8:29 PM

Mentioned in SAL (#wikimedia-operations) [2023-09-26T20:29:32Z] <taavi@deploy2002> Started scap: Backport for [[gerrit:960742|Do not set $wgPasswordResetRoutes['domain'] (T345226)]], [[gerrit:960743|Do not set $wgPasswordResetRoutes['domain'] (T345226)]]

Stashbot added a comment.Sep 26 2023, 8:31 PM

Mentioned in SAL (#wikimedia-operations) [2023-09-26T20:31:02Z] <taavi@deploy2002> taavi: Backport for [[gerrit:960742|Do not set $wgPasswordResetRoutes['domain'] (T345226)]], [[gerrit:960743|Do not set $wgPasswordResetRoutes['domain'] (T345226)]] synced to the testservers mwdebug1001.eqiad.wmnet, mwdebug2001.codfw.wmnet, mwdebug2002.codfw.wmnet, mwdebug1002.eqiad.wmnet, and mw-debug kubernetes deployment (accessible via k8s-experimental XWD option)

Maintenance_bot removed a project: Patch-For-Review.Sep 26 2023, 8:31 PM
Stashbot added a comment.Sep 26 2023, 8:38 PM

Mentioned in SAL (#wikimedia-operations) [2023-09-26T20:38:08Z] <taavi@deploy2002> Finished scap: Backport for [[gerrit:960742|Do not set $wgPasswordResetRoutes['domain'] (T345226)]], [[gerrit:960743|Do not set $wgPasswordResetRoutes['domain'] (T345226)]] (duration: 08m 35s)

ReleaseTaggerBot edited projects, added MW-1.41-notes (1.41.0-wmf.28; 2023-09-26); removed MW-1.41-notes (1.41.0-wmf.29; 2023-10-03).Sep 26 2023, 9:00 PM
hashar unsubscribed.Oct 3 2023, 11:24 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL