Page MenuHomePhabricator
Create Task
Maniphest T338008

IDM Production Checklist for initial signup milestone
Closed, ResolvedPublic
Actions

Description

Checklist for switching the Bitu IDM to production mode

  • Create documentation for monitoring (Run books).
  • Setup email notification on account creation failure.
  • Update signup guide to include instruction to contact Infrastructure Foundation with errors and questions.
  • Setup basic monitoring.
  • Switch to read/write LDAP servers
  • Test failover.
  • Switch from SQLite backend to MariaDB (database have already been created an configured).

Details

SubjectRepoBranchLines +/-
Point IDP login page to IDM for signupoperations/software/cas-overlay-templatemaster+1 -1
C:idm:deployment link to runbook.operations/puppetproduction+1 -0
Update links to create an account and password reset to point to Bituoperations/software/cas-overlay-templatemaster+3 -2
Allow the IDMs to access m5operations/puppetproduction+21 -3
IDM: Failback to EQIADoperations/dnsmaster+1 -1
idm.wikimedia.org: Failover testoperations/dnsmaster+1 -1
Allow setting a separate LDAP DN for Bitu LDAP accessoperations/puppetproduction+17 -5
Add also stub secrets for the mediawiki key for the idm_test rolelabs/privatemaster+2 -0
Signup: Information on how to report bugs.operations/software/bitumaster+14 -1
C:IDM Send errors to infrastructure foundations.operations/puppetproduction+1 -0
Customize query in gerrit

Related Objects
Search...

Event Timeline

SLyngshede-WMF created this task.Jun 2 2023, 8:07 AM
Restricted Application added a project: Infrastructure-Foundations. · View Herald TranscriptJun 2 2023, 8:07 AM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
MoritzMuehlenhoff subscribed.Jun 2 2023, 8:57 AM
gerritbot added a comment.Jun 6 2023, 7:59 AM

Change 927582 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] C:IDM Send errors to infrastructure foundations.

https://gerrit.wikimedia.org/r/927582

gerritbot added a project: Patch-For-Review.Jun 6 2023, 7:59 AM
gerritbot added a comment.Jun 6 2023, 8:04 AM

Change 927582 merged by Slyngshede:

[operations/puppet@production] C:IDM Send errors to infrastructure foundations.

https://gerrit.wikimedia.org/r/927582

Maintenance_bot removed a project: Patch-For-Review.Jun 6 2023, 8:10 AM
gerritbot added a comment.Jun 6 2023, 8:28 AM

Change 927583 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/software/bitu@master] Signup: Information on how to report bugs.

https://gerrit.wikimedia.org/r/927583

gerritbot added a project: Patch-For-Review.Jun 6 2023, 8:28 AM
gerritbot added a comment.Jun 6 2023, 9:51 AM

Change 927583 merged by Slyngshede:

[operations/software/bitu@master] Signup: Information on how to report bugs.

https://gerrit.wikimedia.org/r/927583

Maintenance_bot removed a project: Patch-For-Review.Jun 6 2023, 10:10 AM
SLyngshede-WMF updated the task description. (Show Details)Jun 6 2023, 10:11 AM
gerritbot added a comment.Jun 6 2023, 1:03 PM

Change 927661 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/software/cas-overlay-template@master] Point IDP login page to IDM for signup

https://gerrit.wikimedia.org/r/927661

gerritbot added a project: Patch-For-Review.Jun 6 2023, 1:03 PM
MoritzMuehlenhoff updated the task description. (Show Details)Jun 6 2023, 1:55 PM
gerritbot added a comment.Jun 7 2023, 1:51 PM

Change 928059 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Allow setting a separate LDAP DN for Bitu LDAP access

https://gerrit.wikimedia.org/r/928059

gerritbot added a comment.Jun 7 2023, 2:17 PM

Change 928065 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[labs/private@master] Add also stub secrets for the mediawiki key for the idm_test role

https://gerrit.wikimedia.org/r/928065

gerritbot added a comment.Jun 7 2023, 2:21 PM

Change 928065 merged by Muehlenhoff:

[labs/private@master] Add also stub secrets for the mediawiki key for the idm_test role

https://gerrit.wikimedia.org/r/928065

Muehlenhoff mentioned this in rLPRI799beb0b44d0: Add also stub secrets for the mediawiki key for the idm_test role.Jun 7 2023, 2:23 PM
gerritbot added a comment.Jun 8 2023, 7:59 AM

Change 928059 merged by Muehlenhoff:

[operations/puppet@production] Allow setting a separate LDAP DN for Bitu LDAP access

https://gerrit.wikimedia.org/r/928059

MoritzMuehlenhoff updated the task description. (Show Details)Jun 13 2023, 11:44 AM
gerritbot added a comment.Jun 14 2023, 6:57 AM

Change 929952 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Allow the IDMs on access m5's dbproxy

https://gerrit.wikimedia.org/r/929952

gerritbot added a comment.Jun 14 2023, 8:01 AM

Change 929952 merged by Muehlenhoff:

[operations/puppet@production] Allow the IDMs to access m5

https://gerrit.wikimedia.org/r/929952

Marostegui closed subtask T339196: Reset IDM database as Resolved.Jun 15 2023, 8:43 AM
Marostegui closed subtask T339327: Change IDM database characther encoding as Resolved.Jun 16 2023, 7:20 AM
gerritbot added a comment.Jun 20 2023, 12:40 PM

Change 931599 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/dns@master] idm.wikimedia.org: Failover test

https://gerrit.wikimedia.org/r/931599

gerritbot added a comment.Jun 21 2023, 7:14 AM

Change 931599 merged by Slyngshede:

[operations/dns@master] idm.wikimedia.org: Failover test

https://gerrit.wikimedia.org/r/931599

gerritbot added a comment.Jun 21 2023, 7:47 AM

Change 931869 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/dns@master] IDM: Failback to EQIAD

https://gerrit.wikimedia.org/r/931869

gerritbot added a comment.Jun 21 2023, 7:49 AM

Change 931869 merged by Slyngshede:

[operations/dns@master] IDM: Failback to EQIAD

https://gerrit.wikimedia.org/r/931869

SLyngshede-WMF updated the task description. (Show Details)Jun 21 2023, 7:55 AM
MoritzMuehlenhoff renamed this task from IDM Production Checklist to IDM Production Checklist for initial signup milestone.Jun 28 2023, 9:54 AM
MoritzMuehlenhoff triaged this task as Medium priority.
taavi closed subtask T339917: wikitech logins set the email address every time as Resolved.Jul 18 2023, 10:52 PM
gerritbot added a comment.Aug 30 2023, 2:56 PM

Change 953673 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/software/cas-overlay-template@master] Update links to create an account and password reset to point to Bitu

https://gerrit.wikimedia.org/r/953673

gerritbot added a comment.Aug 31 2023, 7:31 AM

Change 953673 merged by Muehlenhoff:

[operations/software/cas-overlay-template@master] Update links to create an account and password reset to point to Bitu

https://gerrit.wikimedia.org/r/953673

gerritbot added a comment.Aug 31 2023, 7:49 AM

Change 931879 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] C:idm:deployment link to runbook.

https://gerrit.wikimedia.org/r/931879

gerritbot added a comment.Aug 31 2023, 8:49 AM

Change 931879 merged by Slyngshede:

[operations/puppet@production] C:idm:deployment link to runbook.

https://gerrit.wikimedia.org/r/931879

gerritbot added a comment.Aug 31 2023, 2:59 PM

Change 927661 abandoned by Muehlenhoff:

[operations/software/cas-overlay-template@master] Point IDP login page to IDM for signup

Reason:

Obsolete, different patch was merged (which also includes password reset)

https://gerrit.wikimedia.org/r/927661

Maintenance_bot removed a project: Patch-For-Review.Aug 31 2023, 3:10 PM
SLyngshede-WMF closed this task as Resolved.Sep 21 2023, 9:43 AM
SLyngshede-WMF updated the task description. (Show Details)
SLyngshede-WMF moved this task from Backlog to Resolved on the Bitu board.Thu, Apr 11, 10:46 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL