We'd like to have some basic analytics for the (mostly-internal) developer service https://trace.wikimedia.org/
Please let me know whatever else is required, thanks!
| CDanis | |
| Jul 26 2024, 4:30 PM |
| F57273549: image.png | |
| Aug 14 2024, 2:12 PM |
| F57273160: image.png | |
| Aug 14 2024, 11:49 AM |
We'd like to have some basic analytics for the (mostly-internal) developer service https://trace.wikimedia.org/
Please let me know whatever else is required, thanks!
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T340551 distributed tracing epic | |||
| Open | None | T320549 distributed tracing v0 [minimum viable] | |||
| Resolved | BTullis | T371124 request for new matomo site: trace.wikimedia.org/ |
I have added the new site to Matomo:
So you can obtain the Javascript tracking code now from https://piwik.wikimedia.org and embed this within the Jaeger responses.
For now, I have given the view role to this website to the design user, which should be enough to get you started.
If you want to start customising the analytics, then we can either create a Matomo user with elevated privileges for you, or you could log in directly as piwik-wmf-admin and make the changes.
For historical reasons, Matomo has two authentication systems in order to access the UI. Firstly, we have the CAS/SSO system that requires membership of ops,wmf, or nda LDAP groups.
Then we have Matomo's built-in user database, which has its own RBAC system.
What we should really do is to replace both of these with the OIDC login plugin: https://plugins.matomo.org/LoginOIDC which would then provide a unified login. I'm not sure whether this would yet be able to map LDAP groups to roles, though.
Unfortunately, it might be a little while until we do something like that, so for now we will continue to use the built-in user management.
Please let me know if you have any issues with getting it to work. I'm happy to create a user with either write or admin privileges to this site, if you like.
Actually, it looks like the https://plugins.matomo.org/LoginLdap plugin could work better than the OIDC authentication.
We could just use this to offload authentication completely to the Apache virtualhost and use the $_SERVER['REMOTE_USER'] or similar to auto-create users.
@CDanis : I'm closing this as it seems completed from our side. Please re-open and ping me on Slack if you need more from us.