Create top-level domain for a project on project creation
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Andrew
	Apr 14 2017, 2:10 AM

Description

Right now most domain creation/removal is a by-hand, admin only action. New projects should at least get an automatic <project>.wmflabs.org created along with the project.

Shouldn't be too hard, just a designate call from within the keystone hook.

Details

Related Changes in Gerrit:

Subject	Repo	Branch	Lines +/-
Keystone: followup patch for automatic domain creation/cleanup	operations/puppet	production	+12 -11
keystone: Create top-level domain for each new project	operations/puppet	production	+136 -82
designate: allow API access from the keystone host	operations/puppet	production	+1 -1

Customize query in gerrit

Related Objects

Mentioned In: T150091: Support project creation without OpenStackManager

Event Timeline

Andrew created this task.Apr 14 2017, 2:10 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 14 2017, 2:10 AM

Andrew added projects: Cloud-Services, Cloud-VPS.Apr 14 2017, 2:10 AM

Andrew mentioned this in T150091: Support project creation without OpenStackManager.

Paladox subscribed.Apr 14 2017, 2:11 AM

Krenair awarded a token.Aug 30 2017, 6:48 PM

Krenair subscribed.

I think we'll have to do the makedomain-style subdomain creation dance with wmflabsdotorg
Actually let's just import that code and call it?

Change 375089 had a related patch set uploaded (by Alex Monk; owner: Alex Monk):
[operations/puppet@production] [WIP] keystone: Create top-level domain for each new project

https://gerrit.wikimedia.org/r/375089

gerritbot edited projects, added Patch-For-Review; removed Cloud-VPS.Aug 31 2017, 10:34 PM

Krenair claimed this task.Aug 31 2017, 10:34 PM

@Krenair, I am finally looking at your patch for this. It looks good but I want to make the following changes:

Add domain deletion on project deletion
Split out the existing code into a .py library and make 'makedomain' a tool that imports that file

I'm happy to make those changes if you don't feel like it :) First, though, I have to fix some firewall issues that are keeping any of this from working in labtest.

Change 450863 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] designate: allow API access from the keystone host

https://gerrit.wikimedia.org/r/450863

Change 450863 merged by Andrew Bogott:
[operations/puppet@production] designate: allow API access from the keystone host

https://gerrit.wikimedia.org/r/450863

In T162977#4482806, @Andrew wrote:

@Krenair, I am finally looking at your patch for this. It looks good but I want to make the following changes:

Add domain deletion on project deletion

Split out the existing code into a .py library and make 'makedomain' a tool that imports that file

I'm happy to make those changes if you don't feel like it :) First, though, I have to fix some firewall issues that are keeping any of this from working in labtest.

Those changes sound good. I don't have an environment I can test this stuff in so it's best if you do it.

Change 375089 merged by Andrew Bogott:
[operations/puppet@production] keystone: Create top-level domain for each new project

https://gerrit.wikimedia.org/r/375089

Change 463329 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] Keystone: followup patch for automatic domain creation/cleanup

https://gerrit.wikimedia.org/r/463329

Change 463329 merged by Andrew Bogott:
[operations/puppet@production] Keystone: followup patch for automatic domain creation/cleanup