Page MenuHomePhabricator

move donation,donate, donations (otrs, wikimania) exim aliases from SRE to ITS
Closed, ResolvedPublic

Description

This task is about removing the following code from production mail servers controlled by SRE:

 84 #Wikicontribute alias
 85 wikicontribute: donate
 86 # rt-1573
 87 paypalGC:       donate
...
 92 # Aliases for OTRS queues. Do NOT place OTRS queues here!
 93 wikimania:  wikimania-info
 94 # rerouting these for the fundraiser to not overload OTRS
 95 #donation:  info-en
 96 #donations: info-en
 97 #donate:    info-en
 98 donation:   fundraising
 99 donate:     fundraising
100 donations:  fundraising
101 otrs:           otrs@ticket.wikimedia.org
...
wikicontribute:	donate
paypalGC:	donate

It is a subtask of T122144 and also T297307. at T297307#7574106 and T297307#7574634 it was discussed to move these over to ITS as a follow-up.

Originally this was supposed to happen in 2016 in T128647 but we did not end up doing it until today because of T128647#2087287.

I added the "wikimania" and "otrs" ones because they are kind of in the same section and all of them originally related to OTRS (now VRTS)

Details

Due Date
May 16 2022, 7:00 AM

Event Timeline

akosiaris changed the task status from Open to Stalled.Dec 17 2021, 7:46 AM

Thanks for creating this followup ticket.

Stalling until early January per T297307#7575187

akosiaris triaged this task as Medium priority.Dec 17 2021, 7:46 AM

Commenting on behalf of the staff working on Wikimania to note that we'd like to move wikimania-info@ (noted above) and wikimania@ (which both currently direct to the same queue) to ITS in order to simplify workflows. I was originally planning to open a new task, but now having seen this one I'm thinking that might be duplicative.

I can assist with this. I believe once SRE removes the aliases from their side, ITS can add on the Google side.

Hey @Dzahn can you please remove wikimania as an alias from the mail servers controlled by SRE? @elappen-WMF and the Wikimania team would like to use it as a Google Group alias managed by ITS. I know there are still some other aliases to shift over to ITS as well. Thanks for your help.

bcampbell changed the task status from Stalled to Open.Feb 14 2022, 8:06 PM

Hey @Dzahn and @akosiaris I'm working Kristie Robinson from Advancement to also move over donate@ to LDAP on the ITS side. Can you please remove the following aliases from the SRE side?

  • donate
  • wikimania

Hey @Dzahn can you please remove wikimania as an alias from the mail servers controlled by SRE? @elappen-WMF and the Wikimania team would like to use it as a Google Group alias managed by ITS. I know there are still some other aliases to shift over to ITS as well. Thanks for your help.

Hi @bcampbell @elappen-WMF happy to do that, but just checking.. are the OTRS (now VTRS) admins who used to work on this queue aware the emails to them will stop?

Mentioned in SAL (#wikimedia-operations) [2022-02-14T20:24:20Z] <mutante> mx/exim: removing wikimania@wikimedia.org email alias (OTRS -> ITS) (T297915)

Mentioned in SAL (#wikimedia-operations) [2022-02-14T20:26:59Z] <mutante> mx/exim: removing donate@wikimedia.org email alias (OTRS -> ITS) - was alias for fundraising@ (T297915)

@bcampbell both wikimania@ and donate@ have been removed on our side. I can see both should be sent to Google now.

donation@ and donations@ are unchanged.

Thanks for working on this!

Hey @Dzahn my apologies, but I discovered there is one more issue that needs to be resolved with Advancement and that person is in a much different timezone for me, so it cannot be resolved right now. Can you please re-add donate@ on your side and I will work with this person to coordinate an asynchronous switchover? I'm sorry for the extra work.

Mentioned in SAL (#wikimedia-operations) [2022-02-14T20:33:45Z] <mutante> mx/exim: re-adding donate@wikimedia.org email alias (OTRS -> ITS) (T297915)

Hey @bcampbell no problem at all. donate@ is activated again. I just noticed something myself that made me want to revert this change. And it is this:

wikicontribute:	donate
paypalGC:	donate

So wikicontribute@ and paypalGC@ are aliases for donate@. Fundraising needs to specify if those are still needed and if so.. then please add them as aliases to the donate@ inbox before we remove it again.

Cheers

Thanks again @Dzahn. I'll circle back with Advancement and keep you updated.

Sounds good, thank you!

Hey @Dzahn I heard back from Advancement and they'd like to hold off on adjusting their Zendesk intake (donate@) until their maintenance window on May 16. I'll comment on this Task in May when we're ready to make the changes.

Dzahn changed the task status from Open to Stalled.Apr 5 2022, 10:07 PM

ACK, I am setting this to stalled until May.

Dzahn set Due Date to May 16 2022, 7:00 AM.Apr 5 2022, 10:18 PM

Hey @Dzahn I heard back from Advancement and they're ready to move on this. They have a maintenance window open next week, so I was planning on making the changes on Tuesday, May 17, if that works for you.

Just for the sake of clarity, I believe these are the steps that should happen on the 17th:

  • SRE removes donate@ as an alias for fundraising@ on the mail server.
  • ITS deletes fundraising@ Google account and creates donate@ Google account
  • ITS configures donate@ Google account to forward email to support@wikimedia.zendesk.com

Thanks.

Hi @bcampbell Thanks for the update! sounds good to me. Do they have a specific time set for the maintenance window on the 17th?

I think we can do it this way:

  • ITS confirms support@wikimedia.zendesk.com is ready to receive mail
  • ITS prepares donate@ Google account to forward mail to zendesk anytime before the 17th (but shouldn't actually start to receive any mail)
  • SRE removes donate@ alias on the 17th. mail should start arriving at the Google account and then Zendesk now
  • ITS deletes fundraising Google account any time on or after the 17th

Cheers,

Daniel

That makes sense @Dzahn. I'll check in again on this task on the 16th.

Advancement told me that the fundraising maintenance window is all of next week, but is front-loaded starting on 16th PST. They expect other scheduled maintenance tasks to take a couple of days, so they don't have any campaigns or outreach until the following week.

Hey @Dzahn I'm just following up to confirm that Advancement approved the plan, so let's proceed tomorrow with the steps you outlined:

  • ITS confirms support@wikimedia.zendesk.com is ready to receive mail
  • ITS prepares donate@ Google account to forward mail to zendesk anytime before the 17th (but shouldn't actually start to receive any mail)
  • SRE removes donate@ alias on the 17th. mail should start arriving at the Google account and then Zendesk now
  • ITS deletes fundraising Google account any time on or after the 17th

I'll take care of the first two steps today.

Thanks @bcampbell sounds good to me! I'll expect to remove the alias tomorrow on our side, after checking in with you. (or here)

Sounds good, thanks @Dzahn. I'll follow up here tomorrow when the ITS tasks are done (around 15:30 UTC most likely).

Hey @Dzahn my apologies for the delay. I just completed the first two steps:

  • ITS confirms support@wikimedia.zendesk.com is ready to receive mail
  • ITS prepares donate@ Google account to forward mail to zendesk anytime before the 17th (but shouldn't actually start to receive any mail)

You can now remove the donate@ alias from the mail server.

Thanks.

Dzahn changed the task status from Stalled to Open.May 17 2022, 9:05 PM
Dzahn changed the task status from Open to In Progress.

Hi @bcampbell I removed the donate@ alias from the mail servers right now.

I can confirm it now says this is a gsuite_account:

[mx1001:~] $ sudo exim4 -bt donate@wikimedia.org
donate@wikimedia.org
  router = gsuite_account, transport = remote_smtp
  host aspmx.l.google.com [142.251.16.27]

let's send some test mail

How about "donation@" as opposed to "donate@". Is that an alias for fundraising@ or for donate@ as well and can be removed?

I've sent test mail from a couple different addresses, one internal and one external, and both emails went through to Zendesk just fine. All looks good on that front.

I see that donation@ is set up as a delegate for in fundraising@ Gmail settings (screenshot). donations@ is as well, which is a Google account ITS manages. I think that donation@ can be removed as an alias and ITS could remove donations@ as a delegate, but I'll confirm this with Advancement first.

Screen Shot 2022-05-17 at 2.38.56 PM.png (246×676 px, 54 KB)

The following aliases have all been removed on the SRE side now:

donation@
donations@
donate@

paypalgc@

wikicontribute@

All of them are now routing to Google, either the donate@ or the fundraising@ inbox.

donate@wikimedia.org

router = gsuite_account, transport = remote_smtp
host aspmx.l.google.com [172.253.115.27]

donation@wikimedia.org

router = gsuite_account, transport = remote_smtp
host aspmx.l.google.com [142.250.31.26]

donations@wikimedia.org

router = gsuite_account, transport = remote_smtp
host aspmx.l.google.com [172.253.115.27]

wikicontribute@wikimedia.org

router = gsuite_account, transport = remote_smtp
host aspmx.l.google.com [172.253.115.26]

paypalgc@wikimedia.org

router = gsuite_account, transport = remote_smtp
host aspmx.l.google.com [172.253.62.26]