Page MenuHomePhabricator

`mediawiki-replication` Gerrit group is hidden
Closed, ResolvedPublic

Description

On https://gerrit.wikimedia.org/r/#/admin/projects/All-Projects,access a group called mediawiki-replication is granted Read permissions. This is so the replication plugin can copy references to gerrit2001 and github (mirrors). However the group seems that no longer exists given that https://gerrit.wikimedia.org/r/#/admin/groups/uuid-820a70a4a276bb79b029e06283093d9288008500 gives you an error. Is it possible that the group was deleted or renamed and the permissions in All-Projects were not updated? Or is it that the group is not visible? Thanks.

Event Timeline

The group is hidden to non project members thus you carn't see it.

No one checked "Make group visible to all registered users". I'm not sure if it was intentional though.

MarcoAurelio renamed this task from `mediawiki-replication` is a non-existing Gerrit group present in All-Projects.git to `mediawiki-replication` Gerrit group is hidden.Dec 27 2019, 10:58 AM
MarcoAurelio triaged this task as Low priority.
hashar claimed this task.
hashar subscribed.

The group is hidden since it is not meant to have any member. That is used to define which repository have to be replicated to Github.

In puppet:

hieradata/role/common/gerrit.yaml
gerrit::jetty::replication:
    github:
        url: 'git@github.com:wikimedia/${name}'
        authGroup: 'mediawiki-replication'
        remoteNameStyle: 'dash'
        mirror: false
        push:
            - '+refs/heads/*:refs/heads/*'
            - '+refs/tags/*:refs/tags/*'
        createMissingRepositories: false
        maxRetries: 50
        replicatePermissions: false
        # Double escape backslashes:
        # once for regex, once for gitconfig formatting
        projects:
            - '^(?:(?!apps\\/ios\\/).)*$'
            - '^(?:(?!apps\\/android\\/).)*$'

Which crafts the replication configuration documented at https://gerrit.wikimedia.org/r/plugins/replication/Documentation/config.md

When mediawiki-replicate group is granted read permission on a repository, the plugin will replicate the repository to github.