Page MenuHomePhabricator

Deploy Elia MT secrets in Production for ContentTranslation
Closed, ResolvedPublic

Description

Language team requires deployment of new secrets key in private Puppet repository in Production for new machine translation service Elia (https://phabricator.wikimedia.org/T255231).

Requesting SRE clinic duty to deploy and let us know how to send key in a secure way.

Elia MT requires two secrets:

  1. key
  2. apiId

Related changes:

Event Timeline

@Volans What is tag in Phabricator to add in task for SRE Clinic duty?

KartikMistry renamed this task from Deploy Elia MT key in Production for ContentTranslation to Deploy Elia MT secrets in Production for ContentTranslation.Jun 14 2021, 5:44 AM
KartikMistry updated the task description. (Show Details)
Volans triaged this task as Medium priority.
Volans moved this task from Backlog to Acknowledged on the SRE board.

@KartikMistry the SRE tag is the right one ;)

I guess you can gpg-encrypt them with my key and then either send them via email or drop them on a host where you can access.

My GPG key is 0x650ae684 and can be retrieved for example at https://keyserver.ubuntu.com/pks/lookup?search=0x650ae684&fingerprint=on&op=index

@KartikMistry secrets received and added to the private puppet repository. Puppet run on the deployment server deploy1002.
The keys:

mt:
  Elia:
    apiId: ...
    key: ...

are now available for the eqiad/codfw/staging stanzas.

@KartikMistry secrets received and added to the private puppet repository. Puppet run on the deployment server deploy1002.

Thanks!

Volans claimed this task.

Resolving as the secrets are available. Kartik will take care of the deployment when it's the right time.