From the parent task:

Archive your gerrit repo
Make you a GitLab repo
Add needed folks to the repo
Translate your .pipeline/config.yaml to work with GitLab

@thcipriani, who from Release-Engineering-Team could help us with this?

In T337714#8888253, @kostajh wrote:

From the parent task:

Archive your gerrit repo
Make you a GitLab repo
Add needed folks to the repo
Translate your .pipeline/config.yaml to work with GitLab

@thcipriani, who from Release-Engineering-Team could help us with this?

Hey @kostajh we're taking a closer look at the mediawiki/services part of T335921: Migrate mediawiki/ namespace from Gerrit to GitLab this tomorrow. That looks like a prerequisite here. For now, I've added this task to our current sprint. I'll keep you updated.

kharlan opened https://gitlab.wikimedia.org/repos/mediawiki/services/ipoid/-/merge_requests/1

build: Add .gitlab.ci.yml

In T337714#8894445, @CodeReviewBot wrote:

kharlan opened https://gitlab.wikimedia.org/repos/mediawiki/services/ipoid/-/merge_requests/1

build: Add .gitlab.ci.yml

@Tchanders @STran With @Jelto's help, I set this up using the pipeline-to-gitlab conversion script. Comparing the test output in GitLab (https://gitlab.wikimedia.org/repos/mediawiki/services/ipoid/-/jobs/104100) to the existing one in Gerrit/Jenkins (https://integration.wikimedia.org/ci/job/ipoid-pipeline-test/18/console), I think this is working as intended.

I'm not sure if image building will just work, I think we'll need to merge the MR to check that.

jelto opened https://gitlab.wikimedia.org/repos/releng/gitlab-trusted-runner/-/merge_requests/28

add mediawiki/services/ipoid to allowed projects

In T337714#8894469, @kostajh wrote:

I'm not sure if image building will just work, I think we'll need to merge the MR to check that.

The gitlab-ci.yml in your MR uses kokkuri, this should work and re-use the existing blubber file in .pipeline folder. To be able to build and push the image to our registry the project has to be allowed on the Trusted Runners. I created a MR above.

If that is merged, you should be able to merge your MR.

jelto merged https://gitlab.wikimedia.org/repos/releng/gitlab-trusted-runner/-/merge_requests/28

add mediawiki/services/ipoid to allowed projects

Project https://gitlab.wikimedia.org/repos/mediawiki/services/ipoid is allowed in Trusted Runners now.

In T337714#8890671, @thcipriani wrote:

Hey @kostajh we're taking a closer look at the mediawiki/services part of T335921: Migrate mediawiki/ namespace from Gerrit to GitLab this tomorrow. That looks like a prerequisite here. For now, I've added this task to our current sprint. I'll keep you updated.

Thanks @thcipriani.

@kostajh has started setting up the Gitlab repo, and I'm wondering whether we should continue development on Gitlab and start archiving our gerrit repo now, or whether we should continue developing in gerrit until the prerequisite is solved. Might the blocking task delay our deployment if we switch to Gitlab now?

tchanders merged https://gitlab.wikimedia.org/repos/mediawiki/services/ipoid/-/merge_requests/1

build: Add .gitlab.ci.yml

In T337714#8896500, @CodeReviewBot wrote:

tchanders merged https://gitlab.wikimedia.org/repos/mediawiki/services/ipoid/-/merge_requests/1

build: Add .gitlab.ci.yml

Merging this resulted in the GitLab building a production image and pushing to docker-registry.wikimedia.org, see this pipeline's output. I verified by running docker run --rm -it --entrypoint=/bin/cat docker-registry.wikimedia.org/repos/mediawiki/services/ipoid:latest .gitlab-ci.yml. (The file we added in the above merge request is present in the newly built image.)

One of the post-merge pipelines failed, related to publishing code coverage reports. We're discussing that here.

Otherwise, I think we have everything we need in order to use GitLab for code reviews and CI for the ipoid repository.

@Tchanders @STran is there anything else you'd like to see before we would switch to using GitLab for this repo?

In T337714#8896199, @Tchanders wrote:

In T337714#8890671, @thcipriani wrote:

Hey @kostajh we're taking a closer look at the mediawiki/services part of T335921: Migrate mediawiki/ namespace from Gerrit to GitLab this tomorrow. That looks like a prerequisite here. For now, I've added this task to our current sprint. I'll keep you updated.

Thanks @thcipriani.

@kostajh has started setting up the Gitlab repo, and I'm wondering whether we should continue development on Gitlab and start archiving our gerrit repo now, or whether we should continue developing in gerrit until the prerequisite is solved. Might the blocking task delay our deployment if we switch to Gitlab now?

In T337714#8897235, @kostajh wrote:

Otherwise, I think we have everything we need in order to use GitLab for code reviews and CI for the ipoid repository.

I was just talking this through with some folks.

I think the only risk you run using GitLab is we're still working through T335921, so we're adjusting permissions in this space. That may be disruptive in ways we don't anticipate (we'll be mindful you're here, but worst case we lock you out and you yell at us to fix it). But I don't expect major disruptions apart from that: data is all safe and backed up, kokkuri-based workflows are unlikely to make dramatic changes. I think you're safe to continue work on GitLab (with the above caveats).

EDIT: if the above sounded ominous, it wasn't meant to—please use GitLab :)

Change 926424 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):

[operations/deployment-charts@master] ipoid: Set sources to point to GitLab

https://gerrit.wikimedia.org/r/926424

Change 927125 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):

[integration/config@master] jjb: Remove ipoid config

https://gerrit.wikimedia.org/r/927125

Change 927124 had a related patch set uploaded (by Hashar; author: Kosta Harlan):

[mediawiki/services/ipoid@master] Empty repository, update README to point to GitLab

https://gerrit.wikimedia.org/r/927124

Change 927125 merged by jenkins-bot:

[integration/config@master] jjb: Remove ipoid config

https://gerrit.wikimedia.org/r/927125

Change 927124 merged by Hashar:

[mediawiki/services/ipoid@master] Empty repository, update README to point to GitLab

https://gerrit.wikimedia.org/r/927124

I have merged Kosta patch to empty up the Gerrit repository and marked it Read-Only https://gerrit.wikimedia.org/r/admin/repos/mediawiki/services/ipoid,general

Change 926424 merged by jenkins-bot:

[operations/deployment-charts@master] ipoid: Update for GitLab migration

https://gerrit.wikimedia.org/r/926424

As this project migrates over to Gitlab, the new security pipeline templates can be used. I think that https://www.mediawiki.org/wiki/Security/Application_Security_Pipeline#Npm_Audit would be the best fit. I can open a merge request in gitlab for this as well if that is preferred.

In T337714#8906167, @Mstyles wrote:

As this project migrates over to Gitlab, the new security pipeline templates can be used. I think that https://www.mediawiki.org/wiki/Security/Application_Security_Pipeline#Npm_Audit would be the best fit. I can open a merge request in gitlab for this as well if that is preferred.

@Mstyles a merge request (and separate phab task to track it) would be nice, thank you!

In T337714#8917614, @kostajh wrote:

in the meantime, one can use tags from https://docker-registry.wikimedia.org/repos/mediawiki/services/ipoid/tags/

These are just the standard node16 images as defined by https://gitlab.wikimedia.org/repos/mediawiki/services/ipoid/-/blob/main/.pipeline/blubber.yaml, correct? Nothing that can quite be used as a dev/CI image with mariadb support, or at least not yet.

In T337714#8919642, @sbassett wrote:

In T337714#8917614, @kostajh wrote:

in the meantime, one can use tags from https://docker-registry.wikimedia.org/repos/mediawiki/services/ipoid/tags/

These are just the standard node16 images as defined by https://gitlab.wikimedia.org/repos/mediawiki/services/ipoid/-/blob/main/.pipeline/blubber.yaml, correct? Nothing that can quite be used as a dev/CI image with mariadb support, or at least not yet.

Right. Per T308789#8891259 I think we will use the services: feature in GitLab CI to run a MariaDB container alongside the node container, if/when we add integration tests that would use this functionality.