Per T363695#10309189, domain name should be auth.wikimedia.org (not sso.wikimedia.org) and the URL segment identifying the wiki should be a wiki ID, not a domain name.
Description
Description
Details
Details
Customize query in gerrit
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T345245 Mitigate phase-out of third-party cookies across in Wikimedia production | |||
| Open | None | T345249 Mitigate phase-out of third-party cookies in CentralAuth | |||
| Open | None | T348388 Use central login wiki for login (SUL3) | |||
| Open | None | T363695 Create a Wikimedia login domain that can be served by any wiki | |||
| Resolved | Tgr | T365162 Set up sso.wikimedia.beta.wmflabs.org with config-layer routing to other wikis | |||
| Open | JTweed-WMF | T375954 Create SUL 3 rollout plan for Wikimedia production | |||
| Open | None | T377187 Set up auth.wikimedia.org | |||
| Resolved | matmarex | T379811 Update URL structure for SUL3 shared domain |
Event Timeline
Comment Actions
Change #1091839 had a related patch set uploaded (by Bartosz Dziewoński; author: Bartosz Dziewoński):
[operations/mediawiki-config@master] Rename config settings and functions referring to SSO domain
Comment Actions
Change #1091841 had a related patch set uploaded (by Bartosz Dziewoński; author: Bartosz Dziewoński):
[operations/mediawiki-config@master] Rename shared domain sso.wikimedia.org to auth.wikimedia.org
Comment Actions
Change #1091842 had a related patch set uploaded (by Bartosz Dziewoński; author: Bartosz Dziewoński):
[operations/mediawiki-config@master] Use DB name rather than server name in shared domain path prefix
Comment Actions
Change #1091843 had a related patch set uploaded (by Bartosz Dziewoński; author: Bartosz Dziewoński):
[operations/puppet@production] Rename sso.wikimedia.beta.wmflabs.org to auth.wikimedia.beta.wmflabs.org
Comment Actions
Scheduled the MW config patches for today: https://wikitech.wikimedia.org/wiki/Deployments#deploycal-item-20241118T2100
…and the Puppet config patches for tomorrow: https://wikitech.wikimedia.org/wiki/Deployments#deploycal-item-20241119T1700
It seems that there's no way to get them all deployed at the same time (unless some deployer familiar with both systems volunteers to do them both), so SUL3 on the beta cluster will not work correctly in the meantime. I think this is acceptable, since this deployment is just for our testing.
Comment Actions
Change #1091839 merged by jenkins-bot:
[operations/mediawiki-config@master] Rename everything referring to "SSO domain" to use "shared domain"
Comment Actions
Change #1091841 merged by jenkins-bot:
[operations/mediawiki-config@master] Rename shared domain sso.wikimedia.org to auth.wikimedia.org
Comment Actions
Change #1091842 merged by jenkins-bot:
[operations/mediawiki-config@master] Use DB name rather than server name in shared domain path prefix
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-11-18T21:26:00Z] <urbanecm@deploy2002> Started scap sync-world: Backport for [[gerrit:1091839|Rename everything referring to "SSO domain" to use "shared domain" (T379811)]], [[gerrit:1091841|Rename shared domain sso.wikimedia.org to auth.wikimedia.org (T379811)]], [[gerrit:1091842|Use DB name rather than server name in shared domain path prefix (T379811)]]
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-11-18T21:30:33Z] <urbanecm@deploy2002> matmarex, urbanecm: Backport for [[gerrit:1091839|Rename everything referring to "SSO domain" to use "shared domain" (T379811)]], [[gerrit:1091841|Rename shared domain sso.wikimedia.org to auth.wikimedia.org (T379811)]], [[gerrit:1091842|Use DB name rather than server name in shared domain path prefix (T379811)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-11-18T21:36:54Z] <urbanecm@deploy2002> Finished scap sync-world: Backport for [[gerrit:1091839|Rename everything referring to "SSO domain" to use "shared domain" (T379811)]], [[gerrit:1091841|Rename shared domain sso.wikimedia.org to auth.wikimedia.org (T379811)]], [[gerrit:1091842|Use DB name rather than server name in shared domain path prefix (T379811)]] (duration: 10m 54s)
Comment Actions
Change #1092333 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):
[operations/mediawiki-config@master] Use 'auth' rather than 'sso' as cookie prefix on the auth domain
Comment Actions
Change #1092333 merged by jenkins-bot:
[operations/mediawiki-config@master] Use 'auth' rather than 'sso' as cookie prefix on the auth domain
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-11-19T14:44:48Z] <tgr@deploy2002> Started scap sync-world: Backport for [[gerrit:rMW10923336bf71|Use 'auth' rather than 'sso' as cookie prefix on the auth domain (T379811)]]
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-11-19T14:50:21Z] <tgr@deploy2002> tgr: Backport for [[gerrit:rMW10923336bf71|Use 'auth' rather than 'sso' as cookie prefix on the auth domain (T379811)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-11-19T14:59:04Z] <tgr@deploy2002> Finished scap sync-world: Backport for [[gerrit:rMW10923336bf71|Use 'auth' rather than 'sso' as cookie prefix on the auth domain (T379811)]] (duration: 14m 16s)
Comment Actions
Change #1091843 merged by RLazarus:
[operations/puppet@production] Rename sso.wikimedia.beta.wmflabs.org to auth.wikimedia.beta.wmflabs.org
Comment Actions
Everything is deployed and I tested it briefly with the &usesul3=1 parameter, things work as expected.