⚓ T124184 Switch to using Horizon/Designate for labs public dns

	Subject	Repo	Branch	Lines +/-
	Wikitech: Remove address, domain, proxy special pages.	mediawiki/extensions/OpenStackManager	wmf/1.27.0-wmf.18	+0 -3
	Wikitech: Remove address, domain, proxy special pages.	mediawiki/extensions/OpenStackManager	master	+0 -3

Status	Assigned	Task
Resolved	Andrew	T42525 Cant add a security group to an existing instance
Resolved	Andrew	T87279 Make OpenStack Horizon useful for production labs
Resolved	Andrew	T124181 Support instance manipulation, proxies, dns with Horizon
Resolved	• AlexMonk-WMF	T104521 Support reverse dns for public labs IPs
Resolved	Andrew	T124184 Switch to using Horizon/Designate for labs public dns
Resolved	Andrew	T129272 Migrate DNS entries from ldap to designate
Resolved	Andrew	T130032 Enforce true multi-tenancy for labs public DNS
Resolved	Andrew	T131052 replace labs-ns0/1 with labs-ns2/3
Duplicate	None	T124183 Create web-proxy editing panel in Horizon
Resolved	• AlexMonk-WMF	T129245 Horizon dashboard for managing http proxies for labs instances

Andrew created this task.Jan 20 2016, 4:58 PM

Andrew raised the priority of this task from to Medium.

Andrew updated the task description. (Show Details)

Andrew added projects: Cloud-Services, Patch-For-Review, Tracking-Neverending.

Andrew added subscribers: Andrew, Aklapper, gerritbot and 3 others.

matej_suchanek removed projects: Tracking-Neverending, Patch-For-Review.Feb 20 2016, 1:43 PM

Andrew created subtask T129272: Migrate DNS entries from ldap to designate.Mar 8 2016, 8:01 PM

There are a few conflicts between our security model and designates. Specifically, domains are 'owned' by a project, and subdomains cannot be created in other projects. E.g. wmflabs.org will probably be owned by a 'proxy' project, but then other projects will be prevented from creating foo.wmflabs.org. It is possible to create these new domains within the 'proxy' project and then transfer ownership to another project, but that requires the designate v2 api; yet another reason why it will be hard to have the project creation logic live in horizon.

Andrew created subtask T130032: Enforce true multi-tenancy for labs public DNS.Mar 15 2016, 5:27 PM

I think all the design decisions needed here have been made, and we're ready to follow the checklist above.

Andrew updated the task description. (Show Details)Mar 20 2016, 4:20 PM

Andrew set Security to None.

Andrew added a subscriber: • AlexMonk-WMF.

• AlexMonk-WMF added a subtask: T124183: Create web-proxy editing panel in Horizon.Mar 20 2016, 7:03 PM

Andrew updated the task description. (Show Details)Mar 21 2016, 4:40 PM

Andrew added a subtask: T129245: Horizon dashboard for managing http proxies for labs instances.Mar 22 2016, 3:44 AM

• MZMcBride subscribed.Mar 22 2016, 5:09 AM

Andrew updated the task description. (Show Details)Mar 22 2016, 9:03 PM

Andrew updated the task description. (Show Details)Mar 24 2016, 10:39 PM

Andrew updated the task description. (Show Details)Mar 24 2016, 10:49 PM