Page MenuHomePhabricator

request for new matomo site: trace.wikimedia.org/
Closed, ResolvedPublic

Description

We'd like to have some basic analytics for the (mostly-internal) developer service https://trace.wikimedia.org/

Please let me know whatever else is required, thanks!

Event Timeline

BTullis renamed this task from request for new matomo site to request for new matomo site: trace.wikimedia.org/.Aug 8 2024, 2:18 PM
BTullis triaged this task as Medium priority.

I have added the new site to Matomo:

image.png (1,321×148 px, 14 KB)

So you can obtain the Javascript tracking code now from https://piwik.wikimedia.org and embed this within the Jaeger responses.

For now, I have given the view role to this website to the design user, which should be enough to get you started.
If you want to start customising the analytics, then we can either create a Matomo user with elevated privileges for you, or you could log in directly as piwik-wmf-admin and make the changes.

For historical reasons, Matomo has two authentication systems in order to access the UI. Firstly, we have the CAS/SSO system that requires membership of ops,wmf, or nda LDAP groups.
Then we have Matomo's built-in user database, which has its own RBAC system.

What we should really do is to replace both of these with the OIDC login plugin: https://plugins.matomo.org/LoginOIDC which would then provide a unified login. I'm not sure whether this would yet be able to map LDAP groups to roles, though.
Unfortunately, it might be a little while until we do something like that, so for now we will continue to use the built-in user management.

Please let me know if you have any issues with getting it to work. I'm happy to create a user with either write or admin privileges to this site, if you like.

Actually, it looks like the https://plugins.matomo.org/LoginLdap plugin could work better than the OIDC authentication.

image.png (1,000×277 px, 53 KB)

We could just use this to offload authentication completely to the Apache virtualhost and use the $_SERVER['REMOTE_USER'] or similar to auto-create users.

Gehel subscribed.

@CDanis : I'm closing this as it seems completed from our side. Please re-open and ping me on Slack if you need more from us.