Our example node API should get promoted to the staging environment.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | VirginiaPoundstone | T284325 Example Node Prototype API | |||
| Invalid | None | T288134 Deploy prototype API |
Wikimedia production services shouldn't be run in Toolforge/cloudVPS, its meant as a non-prod environment for quick iteration. I would suggest we echo this in our guidelines:
Security team chimed in to say that there already exists production-ish services on cloud services. but that they really would prefer that not to be a thing anymore (security wise)~~
@hnowlan As I understand it today, the deployment to staging k8 I understand that typically SRE would need to +2. Is there anything in your mind that we could incorporate as a check to get this be more automated and less manual?
At the moment anyone with deployment privileges should be able to +2 changes on the deployment-charts repo and deploy the changes. That's still a smaller group but widens it significantly beyond SRE - I wouldn't really think there'd be much wiggle room beyond that, but the correct process would be to get people who wish to deploy into the deployers groups instead
If I'm understanding https://gerrit.wikimedia.org/r/admin/repos/operations/deployment-charts,access correctly, then membership in the wmf-deployment group is sufficient.
I have that, as do a few other members of Platform Team (Cindy, Daniel, Eric, Petr, Tim).
https://gerrit.wikimedia.org/r/admin/groups/3fdcf8fd0d569e90a3e9b39788a29f2c50d33be9,members
We should probably get at least Nikki added. Pretty sure a manager is supposed to make the request. Here's the task where Will had it added for me:
T253640: Requesting access to deployment rights for BPirkle
Change 735717 had a related patch set uploaded (by WQuarshie; author: WQuarshie):
[mediawiki/services/example-node-api@master] CI configurations for deployment
Change 735717 merged by jenkins-bot:
[mediawiki/services/example-node-api@master] CI configurations for deployment
Change 736012 had a related patch set uploaded (by WQuarshie; author: WQuarshie):
[integration/config@master] CI configuration configuration for rehearse and publish variants for the example-node-api
Change 736012 merged by jenkins-bot:
[integration/config@master] jjb, Zuul: [mediawiki/services/example-node-api] Add rehearse, publish steps
Mentioned in SAL (#wikimedia-releng) [2021-11-03T14:48:33Z] <James_F> Zuul: [mediawiki/services/example-node-api] Add rehearse, publish steps T288134
Change 737415 had a related patch set uploaded (by Nikki Nikkhoui; author: Nikki Nikkhoui):
[integration/config@master] Remove publish step
Change 737415 merged by jenkins-bot:
[integration/config@master] Zuul: [mediawiki/services/example-node-api] Skip the publish step for now
Change 737486 had a related patch set uploaded (by Nikki Nikkhoui; author: Nikki Nikkhoui):
[integration/config@master] Zuul: [mediawiki/services/example-node-api] Skip rehearse step for now
Change 737486 merged by jenkins-bot:
[integration/config@master] Zuul: [mediawiki/services/example-node-api] Skip rehearse step for now