Page MenuHomePhabricator

Add SUL3 authentication domain to deploy canary checks
Closed, ResolvedPublic

Description

We are adding a new special domain that can be used to access any wiki while sharing cookies (T363695: Create a Wikimedia login domain that can be served by any wiki). For security reasons, there will be some differences in the configuration used while using this domain (T373737: Disable irrelevant extensions on SUL3 login domain). This means it's possible to break the authentication domain while making a change that's not in any obvious way related to it (most likely, by deploying a new extension that depends on an existing extension; if that extension is disabled on the authentication domain, the new extension needs to be disabled as well).

It's unreasonable to expect the people involved in a deployment to pay attention to this, so we should make sure the tooling checks for breakage, by adding some authentication URL (e.g. https://auth.wikimedia.org/enwiki/wiki/Special:Userlogin) to the canary URLs.

(Blocked on T377187: Set up auth.wikimedia.org for now, the authentication domain only exists in Beta.)

Event Timeline

Change #1099338 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/mediawiki-config@master] SUL3: Add auth domain to URL tests

https://gerrit.wikimedia.org/r/1099338

Change #1099339 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/puppet@production] SUL3: Add auth domain to httpbb URL tests

https://gerrit.wikimedia.org/r/1099339

Change #1099339 merged by Kamila Součková:

[operations/puppet@production] SUL3: Add auth domain to httpbb URL tests

https://gerrit.wikimedia.org/r/1099339

Change #1099338 merged by jenkins-bot:

[operations/mediawiki-config@master] SUL3: Add auth domain to URL tests

https://gerrit.wikimedia.org/r/1099338

Mentioned in SAL (#wikimedia-operations) [2025-01-14T21:10:29Z] <cjming@deploy2002> Started scap sync-world: Backport for [[gerrit:1099338|SUL3: Add auth domain to URL tests (T380574)]]

Mentioned in SAL (#wikimedia-operations) [2025-01-14T21:17:20Z] <cjming@deploy2002> cjming, tgr: Backport for [[gerrit:1099338|SUL3: Add auth domain to URL tests (T380574)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Mentioned in SAL (#wikimedia-operations) [2025-01-14T21:28:29Z] <cjming@deploy2002> Finished scap sync-world: Backport for [[gerrit:1099338|SUL3: Add auth domain to URL tests (T380574)]] (duration: 18m 00s)