Set up a bitu instance for codfw1dev
Open, LowPublic
Actions

Assigned To

Authored By

	Andrew
	Mar 22 2024, 4:33 PM

Description

As we deprecate account and ssh management in wikitech in favor of bitu, we need an equivalent for management in codfw1dev.

@SLyngshede-WMF thinks that this will be straightforward, we just have to find a place to install it.

Details

	Subject	Repo	Branch	Lines +/-
	P:trafficserver::backend remove CloudIDM.	operations/puppet	production	+0 -5

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Open	None	T189531 All Wikimedia developer services should use single sign-on
Resolved	None	T161859 Make Wikitech an SUL wiki
Open	SLyngshede-WMF	T360795 Set up a bitu instance for codfw1dev
Open	SLyngshede-WMF	T362128 Site: 1 VM for codfw1dev bitu deployment
Resolved	ABran-WMF	T362619 Database request for Bitu Cloud DEV installation
Resolved	SLyngshede-WMF	T376871 Decommission cloudidm2001-dev

Event Timeline

Andrew created this task.Mar 22 2024, 4:33 PM

Peachey88 unsubscribed.Mar 22 2024, 8:52 PM

@SLyngshede-WMF, how is bitu currently deployed? Ganeti, k8s, somewhere else?

Bitu is currently installed as a .deb package on two Ganeti hosts.

Andrew added a subtask: T362128: Site: 1 VM for codfw1dev bitu deployment.Apr 9 2024, 1:41 AM

nshahquinn unsubscribed.Apr 9 2024, 5:53 AM

What is the intended use case here? We already have a staging instance for Bitu

In T360795#9704885, @MoritzMuehlenhoff wrote:

What is the intended use case here? We already have a staging instance for Bitu

Management of the LDAP directory used in the codfw1dev OpenStack deployment. This is the "staging cluster" for WMCS OpenStack changes. It uses a project local LDAP directory that has historically been managed with https://labtestwikitech.wikimedia.org, but as Bitu replaces Wikitech's Developer account LDAP management features we need an equivalent replacement in the staging cluster.

Ah, right. Forgot about the local LDAP data base on it.

Just to ensure that everyone agrees on what we need. This will be one Ganeti VM, running Bitu, and an LDAP instance.

Do we need to have do a data migration from the old setup?

The labtest LDAP currently runs on cloudservices2004/2005-dev. I think we have two options: Either a separate Ganeti VM for the labtest/Bitu instance or we simply install it on cloudservices2004/2005, given that Bitu can simply be installed via a deb and only pulls in some moderate dependencies.

I'd prefer that it go on its own ganeti VM, as I'm trying to pare down on the total number if weird things that run on cloudservices.

In T360795#9707776, @Andrew wrote:

I'd prefer that it go on its own ganeti VM, as I'm trying to pare down on the total number if weird things that run on cloudservices.

Fair enough. Do you have any preference on the name? cloudidm2001.codfw.wmnet, e.g.?

Fair enough. Do you have any preference on the name? cloudidm2001.codfw.wmnet, e.g.?

idm2001-dev.codfw.wmnet (or, possibly, cloudidm2001-dev.codfw.wmnet) is consistent with naming elsewhere. The attached subtask (T362128) has more details.

Quiddity unsubscribed.Apr 12 2024, 8:07 PM

Andrew reassigned this task from Andrew to SLyngshede-WMF.May 31 2024, 8:02 PM

@SLyngshede-WMF can this be closed now?

@Andrew Sorry, this is still pending. I need to figure out what to do about the Redis dependency. The correct solution would be to build a Redis container, but that's yet another thing to maintain, so I'll see if I can make it work without it.

TBurmeister unsubscribed.Aug 22 2024, 6:02 PM

fnegri mentioned this in T328289: update labtestwiki user and password.Sep 23 2024, 4:25 PM