Maniphest T367287

Update Wikitech's LDAP credentials to be read-only
Closed, DuplicatePublic
Actions

Assigned To

None

Authored By

	taavi
	Jun 12 2024, 11:30 AM

Tags

Referenced Files

None

Subscribers

MoritzMuehlenhoff

Description

Now that OSM is gone from Wikitech I think we can change the LDAP credentials it uses to a read-only account.

Details

	Subject	Repo	Branch	Lines +/-
	openstack: wikitech: Stop setting writable LDAP credentials	operations/puppet	production	+0 -16

Customize query in gerrit

Related Objects
Search...

View Standalone Graph

This task is connected to more than 200 other tasks. Only direct parents and subtasks are shown here. Use View Standalone Graph to show more of the graph.

	Status	Subtype	Assigned	Task
				· · ·
	Open		None	T189531 All Wikimedia developer services should use single sign-on
	Duplicate		None	T367287 Update Wikitech's LDAP credentials to be read-only
	Resolved		taavi	T161553 Remove OpenStackManager from Wikitech
	Resolved		SLyngshede-WMF	T359820 Developer Account Blocking: Migrate the one-stop Developer (un)Blocking from Wikitech to Bitu
				· · ·

Event Timeline

taavi created this task.Jun 12 2024, 11:30 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 12 2024, 11:30 AM

taavi added a subtask: T161553: Remove OpenStackManager from Wikitech.Jun 12 2024, 11:30 AM

taavi added projects: cloud-services-team, Infrastructure-Foundations.

taavi updated the task description. (Show Details)

MoritzMuehlenhoff subscribed.Jun 12 2024, 1:02 PM

Change #1042267 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] openstack: wikitech: Stop setting writable LDAP credentials

https://gerrit.wikimedia.org/r/1042267

gerritbot added a project: Patch-For-Review.Jun 12 2024, 2:10 PM

taavi claimed this task.Jun 12 2024, 2:11 PM

Please do not do this until Bitu takes over Developer account blocking.

Oh. Right. Good point, I forgot about that.

taavi changed the task status from Open to Stalled.Jun 12 2024, 3:52 PM

taavi added a subtask: T359820: Developer Account Blocking: Migrate the one-stop Developer (un)Blocking from Wikitech to Bitu.

MoritzMuehlenhoff triaged this task as Medium priority.Jun 17 2024, 2:06 PM

taavi closed subtask T161553: Remove OpenStackManager from Wikitech as Resolved.Jun 19 2024, 5:54 AM

taavi removed taavi as the assignee of this task.Jun 25 2024, 3:37 PM

jijiki added a parent task: T189531: All Wikimedia developer services should use single sign-on.Jul 29 2024, 10:16 PM

SLyngshede-WMF changed the status of subtask T359820: Developer Account Blocking: Migrate the one-stop Developer (un)Blocking from Wikitech to Bitu from Open to In Progress.Aug 5 2024, 11:38 AM

Since LdapAuthentication is gone these LDAP credentials should be removed completely instead.

taavi closed this task as a duplicate of T371378: Cleanup: Wikitech code leftovers .Oct 1 2024, 3:17 PM

SLyngshede-WMF closed subtask T359820: Developer Account Blocking: Migrate the one-stop Developer (un)Blocking from Wikitech to Bitu as Resolved.Oct 7 2024, 9:26 AM

Change #1042267 abandoned by Majavah:

[operations/puppet@production] openstack: wikitech: Stop setting writable LDAP credentials

https://gerrit.wikimedia.org/r/1042267

Maintenance_bot removed a project: Patch-For-Review.Sat, Nov 9, 9:30 AM