Set up auth.wikimedia.org
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Tgr
	Oct 15 2024, 9:52 AM

Description

Please create an auth.wikimedia.org domain for T363695: Create a Wikimedia login domain that can be served by any wiki.

(See T378722: Application Security Review Request : SUL3 for the security review and T365162: Set up sso.wikimedia.beta.wmflabs.org with config-layer routing to other wikis for the Beta domain.)

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	Add Apache configuration for auth.wikimedia.org	operations/puppet	production	+16 -0
	Create auth.wikimedia.org	operations/dns	master	+3 -0

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Open	None	T345245 Mitigate phase-out of third-party cookies in Wikimedia production
Resolved	Tgr	T345249 Mitigate phase-out of third-party cookies in CentralAuth
Resolved	OWresch-WMF	T348388 SUL3: Use a dedicated domain for login and account creation
Resolved	Tgr	T363695 Create a Wikimedia login domain that can be served by any wiki
Resolved	JTweed-WMF	T375954 Create SUL3 rollout plan for Wikimedia production
Resolved	Tgr	T383729 SUL3 Phase 0: Account creation and login on test wikis
Resolved	Tgr	T377187 Set up auth.wikimedia.org
Resolved	matmarex	T379811 Update URL structure for SUL3 shared domain
Resolved	sbassett	T378722 Application Security Review Request : SUL3
Resolved	Tgr	T380574 Add SUL3 authentication domain to deploy canary checks

Event Timeline

Tgr created this task.Oct 15 2024, 9:52 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 15 2024, 9:52 AM

Tgr added parent tasks: T363695: Create a Wikimedia login domain that can be served by any wiki, T375954: Create SUL3 rollout plan for Wikimedia production.Oct 15 2024, 9:53 AM

Tgr moved this task from Backlog to Blocked on shared domains on the SUL3 board.Oct 15 2024, 10:01 AM

Tgr moved this task from Inbox, needs triage to Needs refinement on the MediaWiki-Platform-Team board.

Tgr renamed this task from Set up sso.wikimedia.org to Set up auth.wikimedia.org.Nov 13 2024, 7:36 PM

Tgr added a subtask: T379811: Update URL structure for SUL3 shared domain.Nov 13 2024, 7:44 PM

Tgr updated the task description. (Show Details)

Tgr moved this task from Blocked on shared domains to Blocked / External on the SUL3 board.

matmarex closed subtask T379811: Update URL structure for SUL3 shared domain as Resolved.Nov 19 2024, 7:57 PM

Tgr added a subtask: T378722: Application Security Review Request : SUL3.Nov 22 2024, 10:26 AM

Tgr mentioned this in T380574: Add SUL3 authentication domain to deploy canary checks.Nov 22 2024, 10:40 AM

Tgr added a parent task: T380574: Add SUL3 authentication domain to deploy canary checks.

sbassett changed the status of subtask T378722: Application Security Review Request : SUL3 from Open to In Progress.Nov 22 2024, 5:22 PM

Tgr removed a parent task: T380574: Add SUL3 authentication domain to deploy canary checks.Nov 27 2024, 12:07 PM

Tgr added a subtask: T380574: Add SUL3 authentication domain to deploy canary checks.

sbassett closed subtask T378722: Application Security Review Request : SUL3 as Resolved.Dec 20 2024, 5:35 PM

Tgr added a project: DNS.Jan 6 2025, 9:12 PM

Tgr updated the task description. (Show Details)

Maintenance_bot added a project: SRE.Jan 6 2025, 9:29 PM

Maintenance_bot added a project: Traffic.

Change #1109193 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/dns@master] Create auth.wikimedia.org

https://gerrit.wikimedia.org/r/1109193

gerritbot added a project: Patch-For-Review.Jan 9 2025, 1:00 AM

Change #1109196 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/puppet@production] Add Apache configuration for auth.wikimedia.org

https://gerrit.wikimedia.org/r/1109196

Tgr claimed this task.Jan 13 2025, 2:57 PM

Tgr moved this task from Blocked / External to In progress on the SUL3 board.

Tgr moved this task from Needs refinement to In progress (DO NOT USE) on the MediaWiki-Platform-Team board.

Notes from @elukey on IRC:

17:12 < elukey> IIUC the config needs to run on the deployment servers via puppet run, so the correspondent yaml files for helmfile are updated
17:13 < elukey> and after that, a deploy would need to be kicked off to refresh the httpd config

Raine subscribed.Jan 14 2025, 4:32 PM

Change #1109193 merged by Kamila Součková:

[operations/dns@master] Create auth.wikimedia.org

https://gerrit.wikimedia.org/r/1109193

Change #1109196 merged by Kamila Součková:

[operations/puppet@production] Add Apache configuration for auth.wikimedia.org

https://gerrit.wikimedia.org/r/1109196

Maintenance_bot removed a project: Patch-For-Review.Jan 14 2025, 6:31 PM

Tgr added a parent task: T383729: SUL3 Phase 0: Account creation and login on test wikis.Jan 14 2025, 7:57 PM

Tgr closed subtask T380574: Add SUL3 authentication domain to deploy canary checks as Resolved.

Working as expected: