Page MenuHomePhabricator

"Account autocreation denied for CirrusSearch Streaming Updater by ClosedWikiProvider"
Closed, ResolvedPublic

Description

Spotted today while browsing the logs for something else, we have info messages on the "authentication" channel that say: "Account autocreation denied for CirrusSearch Streaming Updater by ClosedWikiProvider".

https://logstash.wikimedia.org/goto/23f85f00c7b9426ba607959076d3aab2

image.png (2,782×528 px, 107 KB)

They stopped after we disabled NetworkSession on public wikis in T373826, but you mentioned that you want to re-enable it, so this will probably need to be resolved.

I'm not sure what the consequences of this problem would be, but it could be something like T373778? If it's not important, feel free to just close the task though.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Two issues here - ClosedWikiProvider (which is custom code in the wmf-config repo) should probably respect CanAlwaysAutoCreate.

But also why is CirrusSearch updating on closed wikis anyway? There shouldn't be anything to update.

But also why is CirrusSearch updating on closed wikis anyway? There shouldn't be anything to update.

Closed wikis are still being served and search is available there, CirrusSearch is still scanning some documents to do some automatic cleanup which I suspect is the source of these API requests.

Change #1074257 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson):

[operations/mediawiki-config@master] ClosedWikiProvider: Support canAlwaysAutocreate option

https://gerrit.wikimedia.org/r/1074257

But also why is CirrusSearch updating on closed wikis anyway? There shouldn't be anything to update.

Closed wikis are still being served and search is available there, CirrusSearch is still scanning some documents to do some automatic cleanup which I suspect is the source of these API requests.

I wonder, should we turn that off for closed wikis? We are already doing filtering based on sitematrix there for private wikis in some cases, we could similarly exclude closed wikis.

But also why is CirrusSearch updating on closed wikis anyway? There shouldn't be anything to update.

Closed wikis are still being served and search is available there, CirrusSearch is still scanning some documents to do some automatic cleanup which I suspect is the source of these API requests.

I wonder, should we turn that off for closed wikis? We are already doing filtering based on sitematrix there for private wikis in some cases, we could similarly exclude closed wikis.

If it's causing issues we could certainly ignore them, but since search is working on these wikis I'd consider them as a set of wikis that we still have to provide some limited support for (re-index, adding/removing fields...) and thus keeping it up-date with the saneitizer makes sense too?

But also why is CirrusSearch updating on closed wikis anyway? There shouldn't be anything to update.

Closed wikis are still being served and search is available there, CirrusSearch is still scanning some documents to do some automatic cleanup which I suspect is the source of these API requests.

I wonder, should we turn that off for closed wikis? We are already doing filtering based on sitematrix there for private wikis in some cases, we could similarly exclude closed wikis.

If it's causing issues we could certainly ignore them, but since search is working on these wikis I'd consider them as a set of wikis that we still have to provide some limited support for (re-index, adding/removing fields...) and thus keeping it up-date with the saneitizer makes sense too?

That seems sensible, we can leave them turned on.

Change #1074257 merged by jenkins-bot:

[operations/mediawiki-config@master] ClosedWikiProvider: Support canAlwaysAutocreate option

https://gerrit.wikimedia.org/r/1074257

Mentioned in SAL (#wikimedia-operations) [2024-09-30T20:24:58Z] <ebernhardson@deploy2002> Started scap sync-world: Backport for [[gerrit:1074257|ClosedWikiProvider: Support canAlwaysAutocreate option (T374987)]]

Mentioned in SAL (#wikimedia-operations) [2024-09-30T20:27:03Z] <ebernhardson@deploy2002> ebernhardson: Backport for [[gerrit:1074257|ClosedWikiProvider: Support canAlwaysAutocreate option (T374987)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Mentioned in SAL (#wikimedia-operations) [2024-09-30T20:35:38Z] <ebernhardson@deploy2002> Finished scap sync-world: Backport for [[gerrit:1074257|ClosedWikiProvider: Support canAlwaysAutocreate option (T374987)]] (duration: 10m 40s)