Page MenuHomePhabricator
Create Task
Maniphest T161553

Remove OpenStackManager from Wikitech
Closed, ResolvedPublic
Actions

Description

  • Support VM management on Horizon
  • Support DNS management on Horizon
  • Support VM Puppet config on Horizon
  • Support sudo policy management on Horizon
  • Allow projectadmins to change project roles without OSM
  • Support project creation/deletion via Horizon
  • Support tool creation/management on Striker
  • Replace or discard 'service group' functionality on OSM
  • Replace LDAP shell account name account creation customization
  • Replace/remove Hiera namespace Puppet customization
  • Remove ext-openstackmanager from the "Extensions used by Wikimedia" list in the translatewiki configuration - done in https://gerrit.wikimedia.org/r/c/translatewiki/+/1046746
  • Stop loading the extension
  • Remove {{OnWikimedia}} from on-wiki documentation (edit)
  • Stop loading extension i18n
  • Stop branching for every train

And then we can archive it: T367220: Archive the OpenStackManager extension

Details

Related Changes in Gerrit:
Show related patches Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenNoneT189531 All Wikimedia developer services should use single sign-on
 ResolvedNoneT161859 Make Wikitech an SUL wiki
 DuplicateNoneT367287 Update Wikitech's LDAP credentials to be read-only
 ResolvedPRODUCTION ERRORTgrT195253 Special:Notifications gives a consistent PHP exception on load ("The trash icon is not registered") for users with OpenStackManager notifications
 OpenNoneT106123 Extensions needing to be removed from Wikimedia wikis
 ResolvedRequestNoneT367220 Archive the OpenStackManager extension
 ResolvedtaaviT161553 Remove OpenStackManager from Wikitech
 ResolvedAndrewT150091 Support project creation without OpenStackManager
 ResolvedAndrewT159021 Wikitech error when adding users to projects
 ResolvedAndrewT162097 Create a Horizon panel for managing per-project sudo policies
 ResolvedAndrewT194191 Allow projectadmins to change project roles in Horizon
 ResolvedMarcoAurelioT194670 Copy maintenance/attachLdapUser.php to another extension
 ResolvedAndrewT194794 Add new users to Bastion group whenever they join a project
 ResolvedtaaviT196171 Developer account creation without OpenStackManager
 DeclinedNoneT179463 Create a single application to provision and manage developer (LDAP) accounts
 DuplicateNoneT189639 Separate LDAP account creation bits from Striker to create a new identity management platform
 ResolvedNoneT319405 Create an IDM for Wikimedia developer accounts
 ResolvedSLyngshede-WMFT319407 IDM milestone 1 "Initial development work"
 ResolvedNoneT319409 Pick a name for the IDM
 ResolvedSLyngshede-WMFT319410 Initial Django project setup
 ResolvedSLyngshede-WMFT319415 Evaluate Striker codebase
 ResolvedMarosteguiT320426 Figure out where/how to store IDM internal data
 ResolvedSLyngshede-WMFT320427 Design and implement async LDAP operations
 ResolvedSLyngshede-WMFT320428 Initial IDM puppetisation
 ResolvedSLyngshede-WMFT320430 Create an initial IDM/LDAP image for tests and CI
 ResolvedSLyngshede-WMFT320431 IDM: Central logging on all changes
 ResolvedSLyngshede-WMFT320603 IDM milestone 2 "Initial limited deployment"
 ResolvedSLyngshede-WMFT320604 Decide on model for serving idm.wikimedia.org
 ResolvedNoneT320605 Figure out an HA setup for the IDM
 ResolvedSLyngshede-WMFT320794 Extend LDAP to allow storing all necessary attributes
 ResolvedSLyngshede-WMFT320795 Implement a staging setup for the IDM
 ResolvedSLyngshede-WMFT320797 Initial production deployment of the IDM
 ResolvedSLyngshede-WMFT320799 IDM integration into CAS SSO
 ResolvedSLyngshede-WMFT320807 Implement OAuth account validation for linking an account to a wiki account
 ResolvedSLyngshede-WMFT320808 Implement email address validation workflow
 OpenNoneT148048 Store Wikimedia unified account name (SUL) in LDAP directory
 OpenNoneT359428 Striker should use ID instead of username to identify SUL accounts
 Resolvedbd808T403906 Unlink SUL account JosefAnthony from Developer account josef1992
 ResolvedSLyngshede-WMFT335091 Determine which sender address to use for email notification
 ResolvedSLyngshede-WMFT340721 Build Debian packages for Bookworm
 ResolvedSLyngshede-WMFT340722 Update IDM servers to Bookworm
 OpenSLyngshede-WMFT320801 Build-out for self service
 ResolvedSLyngshede-WMFT320802 Create a mockup and involve designers
 ResolvedBUG REPORTSLyngshede-WMFT338824 Bitu is not responsive
 InvalidNoneT320805 Define the core attribute list managed in the IDM with all stakeholders
 ResolvedSLyngshede-WMFT320806 Consider reusing some wiki data sources for signup/restrictions
 ResolvedSLyngshede-WMFT320809 Figure out a captcha option for IDM
 OpenNoneT335478 Automatic detection of inactive LDAP account
 OpenNoneT335485 Automatically deploy documentation to docs.wikimedia.org
 ResolvedSLyngshede-WMFT340636 Implement "Forgot my username" feature
 ResolvedSLyngshede-WMFT340637 Implement "update email" functionality
 OpenSLyngshede-WMFT340717 Implement "source" field on user objects
 OpenSLyngshede-WMFT345168 Live validation of usernames
 ResolvedSLyngshede-WMFT345226 Switch developer account creation to Bitu
 OpenSLyngshede-WMFT347572 SSH Key type expiry
 ResolvedtaaviT338477 `Nova Resource:` namespace should be declared in wmf-config, not in Extension:OpenStackManager
 ResolvedtaaviT359544 Disable SSH key management on Wikitech
 ResolvedFeatureSLyngshede-WMFT359543 Allow enabling a key directly when adding it
 ResolvedBUG REPORTSLyngshede-WMFT360634 Bitu not importing key changes directly in LDAP

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes
bd808 updated the task description. (Show Details)Oct 2 2018, 9:16 PM
Liuxinyu970226 subscribed.Nov 6 2018, 12:33 PM
bd808 updated the task description. (Show Details)Nov 28 2018, 5:25 PM
bd808 mentioned this in T211029: Sort out only one ideal hiera mechanism for Cloud VPS.Dec 3 2018, 5:16 PM
bd808 mentioned this in T206706: Establish documentation review process for WMCS.Feb 11 2019, 4:19 AM
Liuxinyu970226 unsubscribed.Feb 25 2019, 1:05 AM
Liuxinyu970226 subscribed.
• GTirloni edited projects, added cloud-services-team (Kanban); removed cloud-services-team.Mar 21 2019, 6:45 PM
• GTirloni mentioned this in T123162: OS-EXT-SRV-ATTR:instance_name not set for some instances.
Meno25 subscribed.May 31 2019, 4:31 PM
Andrew updated the task description. (Show Details)Nov 5 2019, 8:00 PM
gerritbot added a comment.Nov 6 2019, 10:12 PM

Change 549212 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[mediawiki/extensions/OpenStackManager@master] Remove all special pages related to OpenStack

https://gerrit.wikimedia.org/r/549212

gerritbot added a project: Patch-For-Review.Nov 6 2019, 10:12 PM

Change 549213 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[mediawiki/extensions/OpenStackManager@master] Remove echo integration

https://gerrit.wikimedia.org/r/549213

gerritbot added a comment.Nov 6 2019, 10:12 PM

Change 549214 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[mediawiki/extensions/OpenStackManager@master] Remove all interaction with keystone and other openstack endpoints

https://gerrit.wikimedia.org/r/549214

gerritbot added a comment.Nov 8 2019, 9:37 PM

Change 549936 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/mediawiki-config@master] wikitech: remove OSM settings related to OpenStack

https://gerrit.wikimedia.org/r/549936

Andrew added a parent task: T237771: Make Wikitech a normal wiki.Nov 8 2019, 9:42 PM
gerritbot added a comment.Nov 8 2019, 10:38 PM

Change 549212 merged by jenkins-bot:
[mediawiki/extensions/OpenStackManager@master] Remove all special pages related to OpenStack

https://gerrit.wikimedia.org/r/549212

gerritbot added a comment.Nov 8 2019, 10:38 PM

Change 549213 merged by jenkins-bot:
[mediawiki/extensions/OpenStackManager@master] Remove echo integration

https://gerrit.wikimedia.org/r/549213

ReleaseTaggerBot added a project: MW-1.35-notes (1.35.0-wmf.8; 2019-11-26).Nov 8 2019, 11:00 PM
gerritbot added a comment.Nov 10 2019, 4:08 AM

Change 549214 merged by jenkins-bot:
[mediawiki/extensions/OpenStackManager@master] Remove all interaction with keystone and other openstack endpoints

https://gerrit.wikimedia.org/r/549214

bd808 removed a parent task: T237771: Make Wikitech a normal wiki.Nov 10 2019, 11:04 PM
bd808 removed a subtask: T196200: Provide a way for OpenStack admins to manage projects they don't belong to in Horizon.Nov 10 2019, 11:12 PM
brennen subscribed.Dec 4 2019, 10:02 PM
gerritbot added a comment.Dec 5 2019, 8:28 AM

Change 432702 abandoned by Andrew Bogott:
wikitech: Don't load OpenStackManager

Reason:
unclear if/when this can happen

https://gerrit.wikimedia.org/r/432702

gerritbot added a comment.Dec 5 2019, 8:30 AM

Change 432703 abandoned by Andrew Bogott:
wikitech: remove OpenStackManager private settings

Reason:
the OSM removal is going to happen more gradually

https://gerrit.wikimedia.org/r/432703

Dzahn unsubscribed.Dec 6 2019, 3:26 AM
gerritbot added a comment.Dec 10 2019, 2:52 PM

Change 549936 merged by jenkins-bot:
[operations/mediawiki-config@master] wikitech: remove OSM settings related to OpenStack

https://gerrit.wikimedia.org/r/549936

Stashbot added a comment.Dec 10 2019, 2:55 PM

Mentioned in SAL (#wikimedia-operations) [2019-12-10T14:55:46Z] <reedy@deploy1001> Synchronized wmf-config/wikitech.php: T161553 Bye OSM config! (duration: 00m 55s)

• Bstorm changed the status of subtask T196171: Developer account creation without OpenStackManager from Open to Stalled.Feb 11 2020, 5:17 PM
Krinkle mentioned this in T269028: WikimediaDebug should avoid confusion on unsupported domains.Nov 30 2020, 7:22 PM
• Bstorm changed the status of subtask T196171: Developer account creation without OpenStackManager from Stalled to Open.Jan 6 2021, 4:05 PM
Krinkle mentioned this in T304006: Undeploy DynamicSidebar extension from Wikimedia wikis (only Wikitech).Mar 16 2022, 7:50 PM
Stang subscribed.May 27 2022, 12:03 AM
TheresNoTime subscribed.Sep 28 2022, 12:06 PM
Izno subscribed.Oct 14 2022, 10:55 PM
taavi mentioned this in T326910: Update Wikimedia Cloud Services-owned products that may be affected by IP Masking.Jan 18 2023, 10:12 AM
fnegri edited projects, added cloud-services-team; removed cloud-services-team (Kanban).Jan 18 2023, 9:46 PM
fnegri moved this task from Kanban to Inbox on the cloud-services-team board.
Pppery removed a project: Patch-For-Review.Apr 2 2023, 12:55 AM
Aklapper added a subtask: T319405: Create an IDM for Wikimedia developer accounts.Jul 12 2023, 2:13 PM

Added T319405 as a subtask per T237773#9007687

gerritbot added a comment.Jul 25 2023, 11:39 AM

Change 941386 had a related patch set uploaded (by Amire80; author: Amire80):

[translatewiki@master] Move OpenStackManager from "Technical" to "Legacy"

https://gerrit.wikimedia.org/r/941386

gerritbot added a project: Patch-For-Review.Jul 25 2023, 11:39 AM
Amire80 updated the task description. (Show Details)Jul 25 2023, 11:40 AM
gerritbot added a comment.Jul 25 2023, 12:18 PM

Change 941386 merged by jenkins-bot:

[translatewiki@master] Move OpenStackManager from "Technical" to "Legacy"

https://gerrit.wikimedia.org/r/941386

SLyngshede-WMF changed the status of subtask T196171: Developer account creation without OpenStackManager from Open to In Progress.Sep 21 2023, 9:42 AM
Pppery removed a project: Patch-For-Review.Oct 9 2023, 6:13 PM
Pppery subscribed.
taavi closed subtask T196171: Developer account creation without OpenStackManager as Resolved.Mar 7 2024, 1:42 PM
taavi claimed this task.Mar 25 2024, 12:59 PM
taavi subscribed.

Claiming to implement this once a few fixes for the idm.wikimedia.org SSH key management interface has been rolled out.

Andrew added a parent task: T363125: sustainability of wikitech.wikimedia.org.Apr 23 2024, 3:56 AM
gerritbot added a comment.Jun 4 2024, 11:27 AM

Change #1038749 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/mediawiki-config@master] wikitech: Replace OSM class in Gerrit blocking hook

https://gerrit.wikimedia.org/r/1038749

gerritbot added a project: Patch-For-Review.Jun 4 2024, 11:27 AM

Change #1038750 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/mediawiki-config@master] wikitech: Stop loading OpenStackManager

https://gerrit.wikimedia.org/r/1038750

gerritbot added a comment.Jun 6 2024, 11:20 PM

Change #1038749 merged by jenkins-bot:

[operations/mediawiki-config@master] wikitech: Replace OSM class in Gerrit blocking hook

https://gerrit.wikimedia.org/r/1038749

Stashbot added a comment.Jun 6 2024, 11:20 PM

Mentioned in SAL (#wikimedia-operations) [2024-06-06T23:20:47Z] <bd808@deploy1002> Started scap: Backport for [[gerrit:1038749|wikitech: Replace OSM class in Gerrit blocking hook (T161553)]]

Stashbot added a comment.Jun 6 2024, 11:23 PM

Mentioned in SAL (#wikimedia-operations) [2024-06-06T23:23:07Z] <bd808@deploy1002> taavi and bd808: Backport for [[gerrit:1038749|wikitech: Replace OSM class in Gerrit blocking hook (T161553)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Jun 6 2024, 11:32 PM

Mentioned in SAL (#wikimedia-operations) [2024-06-06T23:32:12Z] <bd808@deploy1002> Finished scap: Backport for [[gerrit:1038749|wikitech: Replace OSM class in Gerrit blocking hook (T161553)]] (duration: 11m 24s)

bd808 added a comment.Jun 7 2024, 12:31 AM
In T161553#9869599, @Stashbot wrote:

Mentioned in SAL (#wikimedia-operations) [2024-06-06T23:32:12Z] <bd808@deploy1002> Finished scap: Backport for [[gerrit:1038749|wikitech: Replace OSM class in Gerrit blocking hook (T161553)]] (duration: 11m 24s)

Reverted with https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/1039866

$ mwscript shell --wiki=labswiki
Psy Shell v0.12.3 (PHP 7.4.33 — cli) by Justin Hileman
> wmfGetDeveloperAccountUid('BryanDavis');

   NOTICE  Trying to access array offset on value of type null in /srv/mediawiki/wmf-config/wikitech.php on line 309.


   NOTICE  Trying to access array offset on value of type null in /srv/mediawiki/wmf-config/wikitech.php on line 309.


   NOTICE  Trying to access array offset on value of type null in /srv/mediawiki/wmf-config/wikitech.php on line 309.


   RuntimeException  Did not find UID for user 'BryanDavis'.
taavi added a comment.Jun 7 2024, 5:14 PM

Well, that's embarrassing.. turns out the reason for that is a missing connect() call. Fixed in https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/1040222 which I plan to deploy early next week.

gerritbot added a comment.Jun 11 2024, 5:43 PM

Change #1038750 merged by jenkins-bot:

[operations/mediawiki-config@master] wikitech: Stop loading OpenStackManager

https://gerrit.wikimedia.org/r/1038750

Stashbot mentioned this in T359544: Disable SSH key management on Wikitech.Jun 11 2024, 5:44 PM
Stashbot mentioned this in T338477: `Nova Resource:` namespace should be declared in wmf-config, not in Extension:OpenStackManager.

Mentioned in SAL (#wikimedia-operations) [2024-06-11T17:44:03Z] <taavi@deploy1002> Started scap: Backport for [[gerrit:1038750|wikitech: Stop loading OpenStackManager (T161553 T338477 T359544)]]

Stashbot added a comment.Jun 11 2024, 5:47 PM

Mentioned in SAL (#wikimedia-operations) [2024-06-11T17:46:59Z] <taavi@deploy1002> taavi: Backport for [[gerrit:1038750|wikitech: Stop loading OpenStackManager (T161553 T338477 T359544)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Jun 11 2024, 5:56 PM

Mentioned in SAL (#wikimedia-operations) [2024-06-11T17:56:07Z] <taavi@deploy1002> Finished scap: Backport for [[gerrit:1038750|wikitech: Stop loading OpenStackManager (T161553 T338477 T359544)]] (duration: 12m 00s)

taavi closed subtask T359544: Disable SSH key management on Wikitech as Resolved.Jun 11 2024, 5:59 PM
taavi closed subtask T338477: `Nova Resource:` namespace should be declared in wmf-config, not in Extension:OpenStackManager as Resolved.
taavi updated the task description. (Show Details)
gerritbot added a comment.Jun 11 2024, 6:13 PM

Change #1041742 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/mediawiki-config@master] Stop loading OSM i18n

https://gerrit.wikimedia.org/r/1041742

Jdforrester-WMF updated the task description. (Show Details)Jun 11 2024, 6:15 PM
taavi updated the task description. (Show Details)Jun 11 2024, 6:16 PM
taavi added a parent task: T367220: Archive the OpenStackManager extension.Jun 11 2024, 6:18 PM
CodeReviewBot added a comment.Jun 11 2024, 6:27 PM

taavi opened https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/80

make-release: Stop branching OSM

Bugreporter mentioned this in T367254: Remove namespace 666 from Wikitech.Jun 12 2024, 1:56 AM
taavi added a parent task: T367287: Update Wikitech's LDAP credentials to be read-only.Jun 12 2024, 11:30 AM
taavi mentioned this in MediaWiki-extensions-OpenStackManager.Jun 13 2024, 9:21 AM
gerritbot added a comment.Jun 17 2024, 9:26 AM

Change #1041742 merged by jenkins-bot:

[operations/mediawiki-config@master] Stop loading OSM i18n

https://gerrit.wikimedia.org/r/1041742

Stashbot added a comment.Jun 17 2024, 9:26 AM

Mentioned in SAL (#wikimedia-operations) [2024-06-17T09:26:52Z] <taavi@deploy1002> Started scap: Backport for [[gerrit:1041742|Stop loading OSM i18n (T161553)]]

Stashbot added a comment.Jun 17 2024, 9:48 AM

Mentioned in SAL (#wikimedia-operations) [2024-06-17T09:48:51Z] <taavi@deploy1002> taavi: Backport for [[gerrit:1041742|Stop loading OSM i18n (T161553)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Jun 17 2024, 10:01 AM

Mentioned in SAL (#wikimedia-operations) [2024-06-17T10:01:00Z] <taavi@deploy1002> Finished scap: Backport for [[gerrit:1041742|Stop loading OSM i18n (T161553)]] (duration: 34m 07s)

CodeReviewBot added a comment.Jun 18 2024, 3:09 PM

dancy merged https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/80

make-release: Stop branching OSM

Pppery updated the task description. (Show Details)Jun 18 2024, 3:10 PM
Pppery removed a project: Patch-For-Review.
Pppery updated the task description. (Show Details)Jun 18 2024, 4:48 PM
Pppery updated the task description. (Show Details)

Is this finally done now?

taavi closed this task as Resolved.Jun 19 2024, 5:54 AM

Yes.

jijiki removed a parent task: T363125: sustainability of wikitech.wikimedia.org.Jul 30 2024, 10:04 AM
Stang unsubscribed.Oct 24 2024, 3:26 AM
nshahquinn-wmf closed subtask T319405: Create an IDM for Wikimedia developer accounts as Resolved.Feb 26 2025, 1:00 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits