Adding Security-Team to discuss whether and how we can deploy to beta cluster before a full security review

@sbassett is out this week, so I will set up a meeting next week so we can discuss the beta deployment

With https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Chart/+/1054680 done I think this is ready for me to merge the release patch; can any from the team confirm?

I'm happy for https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/86 to be merged. However, https://www.mediawiki.org/wiki/Writing_an_extension_for_deployment#Preparing_for_deployment says that adding an extension to the wmf branches requires Security team approval, but is that how things operate in practice? Either way, regardless of whether/when the extension is added to the wmf branches, we will not enable it on beta cluster without getting the Security team's approval first (we're meeting with them on Monday).

In T369945#9992410, @Catrope wrote:

I'm happy for https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/86 to be merged.

OK, done.

However, https://www.mediawiki.org/wiki/Writing_an_extension_for_deployment#Preparing_for_deployment says that adding an extension to the wmf branches requires Security team approval, but is that how things operate in practice? Either way, regardless of whether/when the extension is added to the wmf branches, we will not enable it on beta cluster without getting the Security team's approval first (we're meeting with them on Monday).

In practice, I'm the one mostly merging these patches historically. I'd definitely wait until Security gives the nod before actually deploying to Beta.

Thank you @Jdforrester-WMF! With the make-release patch merged, the Chart extension will now be included in the 1.43.0-wmf.15 branch cut on July 22nd, and in the 1.43.0-wmf.16 branch cut on July 29th. Assuming the train runs on schedule, the earliest time we could enable the extension in beta would be after the train finishes on July 25th, but for stability (not breaking things in the event of a train rollback), I think it would be better to wait until the beginning of the following week, July 29th or 30th.

Hey all - just back from jury duty. I don't have any major concerns with this and am inclined to rate it a low risk, unless @acooper has any additional concerns.

Thanks @sbassett! We'll proceed.

Change #1055984 had a related patch set uploaded (by Catrope; author: Catrope):

[operations/mediawiki-config@master] Add Chart extension, enable in beta cluster

https://gerrit.wikimedia.org/r/1055984

This will take longer than we first anticipated, because T371278 needs to be done first.

Change #1055984 merged by jenkins-bot:

[operations/mediawiki-config@master] Add Chart extension, enable in beta cluster

https://gerrit.wikimedia.org/r/1055984

Mentioned in SAL (#wikimedia-operations) [2024-08-26T20:09:12Z] <catrope@deploy1003> Started scap sync-world: Backport for [[gerrit:1055984|Add Chart extension, enable in beta cluster (T369945)]]

Mentioned in SAL (#wikimedia-operations) [2024-08-26T20:27:59Z] <catrope@deploy1003> catrope: Backport for [[gerrit:1055984|Add Chart extension, enable in beta cluster (T369945)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Mentioned in SAL (#wikimedia-operations) [2024-08-26T20:39:10Z] <catrope@deploy1003> Finished scap sync-world: Backport for [[gerrit:1055984|Add Chart extension, enable in beta cluster (T369945)]] (duration: 29m 57s)

For those following along at home, here's an example Chart and the data source it's using, and a (cross-wiki) page using it.