Create a service account to manage testlabs DNS
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Krenair
	May 14 2020, 1:09 AM

Description

See also T235304: Create a service account to manage toolforge.org. from acme-chief. I intend to play around with this thing in the testlabs project.

Details

	Subject	Repo	Branch	Lines +/-
	cloud: Whitelist testlabs-dns-manager for access from cloud subnets	operations/puppet	production	+2 -0

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Resolved	Andrew	T252199 Stop using letsencrypt::cert::integrated
Declined	None	T252734 Consider moving tools away from acme-chief
Resolved	Andrew	T161256 multi-component wmflabs.org subdomains doesn't work under simple wildcard TLS cert
Resolved	Andrew	T251558 multilevel domains in the 'maps' project don't use tls
Resolved	Krenair	T252721 cloud-vps solution for Let's Encrypt
Resolved	Krenair	T252732 Create a service account to manage testlabs DNS

Event Timeline

Krenair created this task.May 14 2020, 1:09 AM

Created user, just need a cloud admin to give it observe+designateadmin rights in the testlabs project.

Done:

root@cloudcontrol1003:~# openstack role assignment list --project testlabs --user testlabs-dns-manager
+----------------------------------+----------------------+-------+----------+--------+--------+-----------+
| Role                             | User                 | Group | Project  | Domain | System | Inherited |
+----------------------------------+----------------------+-------+----------+--------+--------+-----------+
| 47a8370618ea42d49f7047774e75d262 | testlabs-dns-manager |       | testlabs |        |        | False     |
| 906f1588626d4d0993629ea3928b6fb4 | testlabs-dns-manager |       | testlabs |        |        | False     |
+----------------------------------+----------------------+-------+----------+--------+--------+-----------+

Thanks Andrew

we missed a bit, have been wondering why this wasn't working

Change 596528 had a related patch set uploaded (by Alex Monk; owner: Alex Monk):
[operations/puppet@production] cloud: Whitelist testlabs-dns-manager for access from cloud subnets

https://gerrit.wikimedia.org/r/596528

gerritbot added a project: Patch-For-Review.May 14 2020, 11:59 PM

Change 596528 merged by Andrew Bogott:
[operations/puppet@production] cloud: Whitelist testlabs-dns-manager for access from cloud subnets

https://gerrit.wikimedia.org/r/596528

Maintenance_bot removed a project: Patch-For-Review.May 15 2020, 2:10 AM