Site: 1 VM for codfw1dev bitu deployment
Open, MediumPublic
Actions

Assigned To

Authored By

	Andrew
	Tue, Apr 9, 1:41 AM

Description

As we move account management off of wikitech, we need to do the same for the test/dev accounts managed by labtestwikitech. Because labtestwikitech uses a different ldap db from production, we need an equivalent bitu host to manage those accounts. I propose that the server itself be named 'idm2001-dev.codfw.wmnet' and the service endpoint be at 'cloudtestidm.wikimedia.org'

Cloud VPS Project Tested: already deployed in production
Site/Location: codfw
Number of systems: 1
Service: bitu (labtest)
Networking Requirements: internal
Processor Requirements: 2
Memory: 4 GB
Disks: 20 GB
Other Requirements:

Details

Subject	Repo	Branch	Lines +/-
CloudIDM, Install Bitu for labtest	operations/puppet	production	+292 -1
P:idm Make some parameters optional.	operations/puppet	production	+18 -12
Add dummy secrets for idmcloud role.	labs/private	master	+3 -0
R:idm, prepare for Bitu installation for labtestwikitech.	operations/puppet	production	+8 -0

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Open	None	T189531 All Wikimedia developer services should use single sign-on
Open	None	T363125 sustainability of wikitech.wikimedia.org
Open	None	T161859 Make Wikitech an SUL wiki
Open	Andrew	T360795 Set up a bitu instance for codfw1dev
Open	SLyngshede-WMF	T362128 Site: 1 VM for codfw1dev bitu deployment
Resolved	ABran-WMF	T362619 Database request for Bitu Cloud DEV installation

Event Timeline

Andrew created this task.Tue, Apr 9, 1:41 AM

Restricted Application added a project: cloud-services-team. · View Herald TranscriptTue, Apr 9, 1:41 AM

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Andrew added a parent task: T360795: Set up a bitu instance for codfw1dev.Tue, Apr 9, 1:41 AM

Andrew updated the task description. (Show Details)

Andrew mentioned this in T360795: Set up a bitu instance for codfw1dev.Fri, Apr 12, 2:42 PM

You don't need 4G of RAM, 2 should be perfectly fine.

Also, let's not use idm2001-dev, that's too confusin with the already existing IDM staging server. After all, this specifically for the cloud environment, so rather something like cloudidm2001-dev e.g.

MoritzMuehlenhoff triaged this task as Medium priority.Mon, Apr 15, 12:54 PM

MoritzMuehlenhoff added a subscriber: SLyngshede-WMF.

SLyngshede-WMF claimed this task.Mon, Apr 15, 12:55 PM

Change #1020085 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] R:idm Prepare for Bitu installation for labtestwikitech.

https://gerrit.wikimedia.org/r/1020085

gerritbot added a project: Patch-For-Review.Tue, Apr 16, 7:08 AM

Change #1020085 merged by Slyngshede:

[operations/puppet@production] R:idm, prepare for Bitu installation for labtestwikitech.

https://gerrit.wikimedia.org/r/1020085

Cookbook cookbooks.sre.hosts.reimage was started by slyngshede@cumin1002 for host cloudidm2001-dev.codfw.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage started by slyngshede@cumin1002 for host cloudidm2001-dev.codfw.wmnet with OS bookworm completed:

cloudidm2001-dev (PASS)
- Removed from Puppet and PuppetDB if present and deleted any certificates
- Removed from Debmonitor if present
- Forced PXE for next reboot
- Host rebooted via gnt-instance
- Host up (Debian installer)
- Add puppet_version metadata to Debian installer
- Set boot media to disk
- Host up (new fresh bookworm OS)
- Generated Puppet certificate
- Signed new Puppet certificate
- Run Puppet in NOOP mode to populate exported resources in PuppetDB
- Found Nagios_host resource for this host in PuppetDB
- Downtimed the new host on Icinga/Alertmanager
- First Puppet run completed and logged in /var/log/spicerack/sre/hosts/reimage/202404160905_slyngshede_2920324_cloudidm2001-dev.out
- configmaster.wikimedia.org updated with the host new SSH public key for wmf-update-known-hosts-production
- Rebooted
- Automatic Puppet run was successful
- Forced a re-check of all Icinga services for the host
- Icinga status is optimal
- Icinga downtime removed
- Updated Netbox data from PuppetDB
- Cleared switch DHCP cache and MAC table for the host IP and MAC (EVPN Switch)