It's a new year and it makes sense to rotate our passwords to make sure we keep this habit of doing it at least once a year (and not because they get leaked).
Following the established system: New users: wikiadmin2023 and wikiuser2023. Then deploy the changes and then start dropping the old users. For wikiuser it should take at most a couple of hours but with wikiadmin we have to wait for all maint scripts to finish which might take a week.
Mentioned in SAL (#wikimedia-operations) [2023-01-26T06:32:49Z] <ladsgroup@deploy1002> Synchronized private/PrivateSettings.php: Rotating wikiuser password (T326802) (duration: 07m 23s)
wikiuser2023 is now deployed to all databases and appservers. I'm not seeing anything on wikiuser202206 anymore but I'll wait a bit before dropping the old user. Now it's time for puppet and other changes
Change 883693 had a related patch set uploaded (by Ladsgroup; author: Amir Sarabadani):
[operations/puppet@production] mariadb: Rotate wikiuser to wikiuser2023
Change 883695 had a related patch set uploaded (by Ladsgroup; author: Amir Sarabadani):
[operations/software@master] dbtools: Rotate wikiuser
Change 883693 merged by Ladsgroup:
[operations/puppet@production] mariadb: Rotate wikiuser to wikiuser2023
Change 883695 merged by jenkins-bot:
[operations/software@master] dbtools: Rotate wikiuser
Doing wikiadmin now. FWIW I made https://wikitech.wikimedia.org/wiki/MariaDB/Changing_user_passwords and will put the code somewhere today and link them in the doc.
Mentioned in SAL (#wikimedia-operations) [2023-01-26T14:31:01Z] <ladsgroup@deploy1002> Synchronized private/PrivateSettings.php: Rotating wikiadmin password (T326802) (duration: 07m 04s)
Change 883957 had a related patch set uploaded (by Ladsgroup; author: Amir Sarabadani):
[operations/software@master] dbtools: Update call to wikiadmin
Change 883961 had a related patch set uploaded (by Ladsgroup; author: Amir Sarabadani):
[operations/puppet@production] mariadb: Centralize and change wikiadmin user grants
Change 883957 merged by jenkins-bot:
[operations/software@master] dbtools: Update call to wikiadmin
Change 883961 merged by Ladsgroup:
[operations/puppet@production] mariadb: Centralize and change wikiadmin user grants
Mentioned in SAL (#wikimedia-operations) [2023-01-30T11:41:31Z] <Amir1> dropping old wikiadmin user (T326802)
This is done, the next steps: