Configure SimilarEditors in production with Similarusers credentials
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	Tchanders
	May 18 2022, 1:32 PM

Description

The SimilarEditors extension provides an interface via MediaWiki to the Similarusers service. It is available only to users who have the similarusers right.

The service requires credentials from the extension, which are passed via the extension's SimilarEditorsClient: https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/SimilarEditors/+/bbabece604d67c7bf22bade77c538422d8385250/src/ServiceWiring.php#8

These configs need to be set to the correct values on WMF's production appservers.

This is a blocker to production deployment of SimilarEditors (but not necessarily to beta cluster deployment, since we have a mock client for testing).

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Open		None	T304666 Deploy Similar Editors
		Open		None	T308670 Configure SimilarEditors in production with Similarusers credentials

Event Timeline

Tchanders created this task.May 18 2022, 1:32 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 18 2022, 1:32 PM

Tchanders renamed this task from Configure SimilarEditors in production with similar-users credentials to Configure SimilarEditors in production with Similarusers credentials.May 20 2022, 1:53 PM

Tchanders edited projects, added Release-Engineering-Team, Platform Engineering, Anti-Harassment (AHaT Sprint 8: The Flat Cap); removed Anti-Harassment.

Tchanders updated the task description. (Show Details)

Tchanders added subscribers: • AGueyte, STran.

My understanding is that Platform Engineering can provide the service's credentials, and Release-Engineering-Team can set the config values privately.

Do let me know if Anti-Harassment can do anything - e.g. should we update this file?

Tchanders moved this task from Ready 🎬 (ONLY IF YOU HAVE NO MORE CODE TO REVIEW) to Blocked/Stalled 🚧 on the Anti-Harassment (AHaT Sprint 8: The Flat Cap) board.May 20 2022, 1:58 PM

Tchanders added a parent task: T304666: Deploy Similar Editors.

Tchanders mentioned this in T304631: Application Security Review Request : SimilarEditors.May 20 2022, 3:46 PM

ARamirez_WMF edited projects, added Anti-Harassment (AHaT Sprint 9: The Beret); removed Anti-Harassment (AHaT Sprint 8: The Flat Cap).May 31 2022, 5:12 PM

ARamirez_WMF moved this task from Ready 🎬 (ONLY IF YOU HAVE NO MORE CODE TO REVIEW) to Blocked/Stalled 🚧 on the Anti-Harassment (AHaT Sprint 9: The Beret) board.May 31 2022, 5:14 PM

ARamirez_WMF edited projects, added Anti-Harassment (AHaT Sprint 10: The Mokorotlo); removed Anti-Harassment (AHaT Sprint 9: The Beret).Jun 14 2022, 5:03 PM

ARamirez_WMF moved this task from Ready 🎬 (ONLY IF YOU HAVE NO MORE CODE TO REVIEW) to Blocked/Stalled 🚧 on the Anti-Harassment (AHaT Sprint 10: The Mokorotlo) board.

Mentioned in SAL (#wikimedia-operations) [2022-06-15T14:30:10Z] <hnowlan@deploy1002> Synchronized private/PrivateSettings.php: T308670 credentials to access the similar-users service (duration: 03m 32s)

Now that PrivateSettings.php is updated, I believe all we need to do is configure the URL for the service. @Niharika Can we use the real service on Beta?

@Tchanders is there a list of users who will have access to the service if we host it on beta?
On slack I heard you say that "global steward rights group" will have access. Who is on this group? This task description states -

The SimilarEditors extension provides an interface via MediaWiki to the Similarusers service. It is available only to users who have the similarusers right.

Who all have this right?

Basically if we can ensure that the service will only be available to a limited, trusted group of users then we can host it on beta. Otherwise not.

In T308670#8009598, @Niharika wrote:

@Tchanders is there a list of users who will have access to the service if we host it on beta?
On slack I heard you say that "global steward rights group" will have access. Who is on this group? This task description states -

The SimilarEditors extension provides an interface via MediaWiki to the Similarusers service. It is available only to users who have the similarusers right.

Who all have this right?

Basically if we can ensure that the service will only be available to a limited, trusted group of users then we can host it on beta. Otherwise not.

@Niharika I think this is the question I'm asking... If you're not sure, then perhaps we should not, to be safe? We can use the real service on testwiki instead. I believe testwiki deployment is mostly blocked on T304633: Performance review of Extension:SimilarEditors and T304631: Application Security Review Request : SimilarEditors.