Page MenuHomePhabricator
Create Task
Maniphest T255034

Wikimedia API Gateway Long-term Use
Open, Needs TriagePublic1 Estimated Story Points
Actions

Description

This epic is for long-term gateway user stories. It may get broken down into smaller epics ("do these first, do these second") after gateway launch.

Related Objects
Search...

StatusSubtypeAssignedTask
 Resolved• eprodromouT235270 Wikimedia API Gateway
 OpenNoneT255034 Wikimedia API Gateway Long-term Use
 Resolved• eprodromouT246260 API Developer mounts new API on path
 Resolved• eprodromouT246263 Administrator unmounts API from path
 Resolved• eprodromouT246264 Curator chooses available APIs
 Resolved• eprodromouT246268 API Developer uses OAuth 2.0 for authentication and authorization
 OpenNoneT253776 [API Gateway] Administrator defines burst limit
 OpenNoneT253777 [API Gateway] Administrator defines connection limit
 ResolvedapaskulinT250304 Add use case landing pages
 OpenNoneT250306 API Portal: Define programming language landing pages
 OpenNoneT253887 [API Gateway] Administrator limits number of client IDs per Client Developer
 OpenNoneT246275 [API Gateway] Client Developer get API usage data
 OpenNoneT246279 [API Gateway] Client Developer gets rate limit notification
 OpenNoneT259176 [API Gateway] Display client rate limit in the API Portal
 ResolvedakosiarisT251812 System administrator reviews API usage by client
 Resolved• PcheloloT259736 Unify access log schema for Action API and API Gateway/REST API
 ResolvedJMeybohmT260536 Package an up to date version of fluent-bit / td-agent-bit for buster
 Resolved• PcheloloT260626 Enable TLS for api-gateway -> eventgate access log delivery
 Resolved• PcheloloT260820 Followups to access logging after envoy 1.16
 Resolved• eprodromouT261002 Ingest api-gateway.request events to turnillo
 ResolvedNoneT258748 Client Developer has a cookie-free API call
 ResolvedhnowlanT259294 Configure API Portal to only send session cookie to its own routes
 ResolvedhnowlanT259296 Filter cookie headers for all API route requests
 ResolvedBCornwallT260943 Don't set cookies for api.wikimedia.org at the caching layer
 OpenNoneT259722 [API Gateway] Product Manager reads registered OAuth Client ID metrics
 OpenNoneT259724 [API Gateway] Product Manager reads Active OAuth Client ID metrics
 Resolved• PcheloloT246278 Client Developer gets rate limit headers
 Resolved• PcheloloT259544 Drop lua filter from api-gateway envoy
 OpenNoneT254190 Allow a user to disable an OAuth client
 OpenNoneT261902 Rename OAuth consumer management endpoints
 OpenNoneT265145 [API Gateway] Client Developer reads Feed Availability Endpoint
 OpenNoneT258934 [API Gateway] Move ratelimiter to its own chart outside of the api-gateway
 OpenhnowlanT260056 [API Gateway] Add validation of Envoy configuration to deployment-charts Rakefile
Resolved• ClarakosiT254914 Finalise Envoy configuration with completed Rate Limiter
 Resolved• ClarakosiT260591 Move rate limits configuration from route to virtual host
 Resolved• ClarakosiT261350 Envoy ratelimit config cleanups after 1.16
 DeclinedNoneT254917 Implement API Gateway solution for deployment-prep
 OpenNoneT269156 [API Gateway] Change how client credentials are handled in the rate limiter
 Resolved• PcheloloT268791 Allow Api-User-Agent header in API Gateway requests
 ResolvedapaskulinT255482 API Portal: Document stability policy
 ResolvedapaskulinT253067 API Portal: Document security best practices
 ResolvedapaskulinT255486 API Portal: Document authorization flows
 StalledNoneT259178 [API Gateway] Document process for client developers to request a higher rate limit
 ResolvedhnowlanT254916 Define base set of SLOs covering API Gateway
 OpenNoneT263727 Separate mediawiki latency metrics by endpoint
 ResolvedcolewhiteT263728 mtail 3.0.0-rc35 doesn't support the histogram type in -oneshot mode.
 OpenNoneT258757 Write unit tests for WikimediaApiPortalOAuth
DuplicatehasharT265407 Create a coverage job for skins
 ResolvedNoneT254950 Performance review of WikimediaApiPortalOAuth extension

Event Timeline

• eprodromou created this task.Jun 10 2020, 3:38 PM
• eprodromou added a subtask: T246260: API Developer mounts new API on path.Jun 10 2020, 3:40 PM
• eprodromou added a subtask: T246263: Administrator unmounts API from path.
• eprodromou added a subtask: T246264: Curator chooses available APIs.
• eprodromou added a subtask: T246268: API Developer uses OAuth 2.0 for authentication and authorization.Jun 10 2020, 3:44 PM
• eprodromou added a subtask: T253776: [API Gateway] Administrator defines burst limit.Jun 10 2020, 4:43 PM
• eprodromou added a subtask: T253777: [API Gateway] Administrator defines connection limit.
apaskulin added a subtask: T253067: API Portal: Document security best practices.Jun 15 2020, 8:31 PM
apaskulin removed a subtask: T253067: API Portal: Document security best practices.
apaskulin added a subtask: T250304: Add use case landing pages.
apaskulin added a subtask: T250306: API Portal: Define programming language landing pages.
• eprodromou added a subtask: T253887: [API Gateway] Administrator limits number of client IDs per Client Developer.Jul 23 2020, 2:50 PM
• eprodromou added a subtask: T246275: [API Gateway] Client Developer get API usage data.Jul 27 2020, 11:54 AM
• eprodromou added a subtask: T246279: [API Gateway] Client Developer gets rate limit notification.Jul 27 2020, 12:01 PM
apaskulin added a subtask: T259176: [API Gateway] Display client rate limit in the API Portal.Jul 29 2020, 6:25 PM
• eprodromou added a subtask: T251812: System administrator reviews API usage by client.Oct 8 2020, 10:21 PM
• eprodromou added a subtask: T258748: Client Developer has a cookie-free API call.
• eprodromou added a subtask: T259722: [API Gateway] Product Manager reads registered OAuth Client ID metrics.
• eprodromou added a subtask: T259724: [API Gateway] Product Manager reads Active OAuth Client ID metrics.Oct 8 2020, 10:23 PM
• eprodromou added a subtask: T246278: Client Developer gets rate limit headers.
• eprodromou added a subtask: T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream.Oct 8 2020, 10:27 PM
• eprodromou added a subtask: T259544: Drop lua filter from api-gateway envoy.
• eprodromou added a subtask: T254190: Allow a user to disable an OAuth client.Oct 8 2020, 10:31 PM
• eprodromou added a subtask: T261902: Rename OAuth consumer management endpoints.
• eprodromou added a subtask: T265145: [API Gateway] Client Developer reads Feed Availability Endpoint.Oct 9 2020, 1:56 PM
• eprodromou added a subtask: T258934: [API Gateway] Move ratelimiter to its own chart outside of the api-gateway.Oct 22 2020, 8:15 PM
• eprodromou added a subtask: T260056: [API Gateway] Add validation of Envoy configuration to deployment-charts Rakefile .
• eprodromou added a subtask: T254914: Finalise Envoy configuration with completed Rate Limiter.
• eprodromou added a subtask: T254917: Implement API Gateway solution for deployment-prep.Oct 22 2020, 8:19 PM
• eprodromou added a subtask: T269156: [API Gateway] Change how client credentials are handled in the rate limiter.Dec 7 2020, 7:46 PM
• eprodromou added a subtask: T268791: Allow Api-User-Agent header in API Gateway requests.
• eprodromou added a project: Platform Engineering Roadmap.Dec 8 2020, 3:54 PM
Naike set the point value for this task to 1.Dec 10 2020, 2:17 PM
• eprodromou added a subtask: T255482: API Portal: Document stability policy.Dec 15 2020, 6:44 PM
• eprodromou added a subtask: T253067: API Portal: Document security best practices.Dec 15 2020, 6:53 PM
• eprodromou added a subtask: T255486: API Portal: Document authorization flows.
• eprodromou added a subtask: T259178: [API Gateway] Document process for client developers to request a higher rate limit.
• eprodromou added a subtask: T254916: Define base set of SLOs covering API Gateway.
• eprodromou added a subtask: T258757: Write unit tests for WikimediaApiPortalOAuth .Dec 15 2020, 7:02 PM
• eprodromou added a subtask: T265407: Create a coverage job for skins.
• eprodromou added a subtask: T254950: Performance review of WikimediaApiPortalOAuth extension.
apaskulin changed the status of subtask T259178: [API Gateway] Document process for client developers to request a higher rate limit from Open to Stalled.Dec 18 2020, 10:46 PM
apaskulin closed subtask T255486: API Portal: Document authorization flows as Resolved.Dec 22 2020, 2:19 AM
apaskulin closed subtask T255482: API Portal: Document stability policy as Resolved.
apaskulin closed subtask T246268: API Developer uses OAuth 2.0 for authentication and authorization as Resolved.Jan 8 2021, 12:34 AM
apaskulin closed subtask T246264: Curator chooses available APIs as Resolved.Jan 8 2021, 12:45 AM
apaskulin closed subtask T246260: API Developer mounts new API on path as Resolved.
apaskulin closed subtask T246263: Administrator unmounts API from path as Resolved.
apaskulin closed subtask T250304: Add use case landing pages as Resolved.Jan 22 2021, 12:32 AM
Aklapper removed • eprodromou as the assignee of this task.Apr 1 2021, 5:51 AM
hnowlan closed subtask T258748: Client Developer has a cookie-free API call as Resolved.Apr 1 2021, 9:38 AM
• Pchelolo closed subtask T246278: Client Developer gets rate limit headers as Resolved.May 21 2021, 6:07 PM
• Pchelolo closed subtask T254914: Finalise Envoy configuration with completed Rate Limiter as Resolved.
• Pchelolo closed subtask T259544: Drop lua filter from api-gateway envoy as Resolved.May 21 2021, 6:10 PM
hnowlan closed subtask T254916: Define base set of SLOs covering API Gateway as Resolved.May 25 2021, 4:30 PM
apaskulin closed subtask T268791: Allow Api-User-Agent header in API Gateway requests as Resolved.Jun 9 2021, 2:44 AM
apaskulin closed subtask T254950: Performance review of WikimediaApiPortalOAuth extension as Resolved.Jul 12 2021, 5:53 PM
apaskulin closed subtask T253067: API Portal: Document security best practices as Resolved.Aug 19 2021, 8:49 PM
Aklapper added a project: serviceops.Apr 1 2024, 8:15 AM

As API Gateway is nowadays owned by serviceops, adding the serviceops project tag to open API Gateway tasks tagged with the deprecated/archived "Platform Team Initiatives (API Gateway)" tag at https://phabricator.wikimedia.org/project/profile/4321/, as part of Phabricator Housekeeping.

Krinkle removed a subtask: T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream.Apr 15 2024, 3:24 PM
Krinkle mentioned this in T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream.
hnowlan closed subtask T254917: Implement API Gateway solution for deployment-prep as Declined.Jun 13 2024, 11:11 AM
akosiaris closed subtask T251812: System administrator reviews API usage by client as Resolved.Tue, Jul 2, 4:19 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits