Page MenuHomePhabricator

hnowlan (Hugh Nowlan)
User

Projects

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Saturday

  • Clear sailing ahead.

User Details

User Since
Jan 6 2020, 12:19 PM (42 w, 2 d)
Availability
Available
LDAP User
Unknown
MediaWiki User
HNowlan (WMF) [ Global Accounts ]

Recent Activity

Mon, Oct 12

hnowlan added a comment to T254014: Reimport OSM data on eqiad.

Just a few queries to get me clued in:

  • Is there advance notice required for these changes or a safe period within which to do it?
  • For deleting the postgres data, is it a matter of just doing a dropdb?
  • I assume the cookbook required is sre.postgresql.postgres-init?
Mon, Oct 12, 2:59 PM · Platform Team Workboards (Green), Patch-For-Review, Product-Infrastructure-Team-Backlog, Discovery-Search, Maps

Fri, Oct 9

hnowlan added a comment to T257118: Beta cluster has reached its quota.

I suspect some or all of the Kafka hosts (it's required for changeprop to behave normally) need to be kept but I don't know which.

Fri, Oct 9, 11:48 AM · Beta-Cluster-Infrastructure
hnowlan updated the task description for T257118: Beta cluster has reached its quota.
Fri, Oct 9, 11:48 AM · Beta-Cluster-Infrastructure
hnowlan updated the task description for T257118: Beta cluster has reached its quota.
Fri, Oct 9, 11:43 AM · Beta-Cluster-Infrastructure
hnowlan added a comment to T263726: [Bug] Puppet is failing for maps beta cluster - could not find group maps-admins.

Hard to say what happened before - It might have been manually added locally to work around this

Fri, Oct 9, 11:00 AM · Beta-Cluster-Infrastructure, Maps, Cloud-VPS, Product-Infrastructure-Team-Backlog

Thu, Oct 8

hnowlan closed T261512: Provision new RESTBase/Cassandra cluster nodes: restbase1028, restbase1029, restbase1030 as Resolved.
Thu, Oct 8, 10:46 AM · RESTBase-Cassandra, Platform Engineering, Cassandra

Wed, Oct 7

hnowlan added a comment to T263726: [Bug] Puppet is failing for maps beta cluster - could not find group maps-admins.

This issue is caused by deployment-prep not doing group and user creation the same way as in production. We don't really have a pattern for creating groups in deployment-prep - would it be an issue if we just didn't create this group? I assume anyone working on this machine in deployment-prep will have sudo to begin with. In this case the group is used only to set permissions on the postgresql logs for the instance.

Wed, Oct 7, 4:57 PM · Beta-Cluster-Infrastructure, Maps, Cloud-VPS, Product-Infrastructure-Team-Backlog

Tue, Oct 6

hnowlan moved T263858: Evaluate and Document current state of Maps from SRE perspective from Ready to Doing on the Platform Team Workboards (Green) board.
Tue, Oct 6, 4:36 PM · Platform Team Workboards (Green), Maps, Epic, Product-Infrastructure-Team-Backlog
hnowlan moved T264043: Remove Print/export from navigation from Ready to Waiting for Review on the Platform Team Workboards (Green) board.
Tue, Oct 6, 4:35 PM · Platform Team Workboards (Green), MediaWiki-skins-WikimediaApiPortal
hnowlan closed T264092: Restbase on buster as Resolved.
Tue, Oct 6, 4:01 PM · Patch-For-Review, Platform Team Workboards (Green)
hnowlan moved T264092: Restbase on buster from Doing to Done on the Platform Team Workboards (Green) board.
Tue, Oct 6, 4:01 PM · Patch-For-Review, Platform Team Workboards (Green)
hnowlan committed rGRBD4ad65b00720f: Add new restbase hosts. (authored by hnowlan).
Add new restbase hosts.
Tue, Oct 6, 11:22 AM

Mon, Oct 5

hnowlan added a comment to T264195: Kubernetes pods are being periodically evicted because of Disk Space pressure caused by cpjobqueue.

cpjobqueue has now been tuned down as well

Mon, Oct 5, 5:26 PM · serviceops-radar, Kubernetes

Wed, Sep 30

hnowlan claimed T264043: Remove Print/export from navigation.
Wed, Sep 30, 3:03 PM · Platform Team Workboards (Green), MediaWiki-skins-WikimediaApiPortal
hnowlan added a comment to T264043: Remove Print/export from navigation.

I think so!

Wed, Sep 30, 3:03 PM · Platform Team Workboards (Green), MediaWiki-skins-WikimediaApiPortal
hnowlan claimed T264195: Kubernetes pods are being periodically evicted because of Disk Space pressure caused by cpjobqueue.
Wed, Sep 30, 2:43 PM · serviceops-radar, Kubernetes
hnowlan renamed T264092: Restbase on buster from Restbase on buster preliminary work to Restbase on buster .
Wed, Sep 30, 12:46 PM · Patch-For-Review, Platform Team Workboards (Green)

Tue, Sep 29

hnowlan moved T264092: Restbase on buster from Backlog to Doing on the Platform Team Workboards (Green) board.
Tue, Sep 29, 5:28 PM · Patch-For-Review, Platform Team Workboards (Green)
hnowlan updated the task description for T264092: Restbase on buster .
Tue, Sep 29, 5:28 PM · Patch-For-Review, Platform Team Workboards (Green)
hnowlan triaged T264092: Restbase on buster as Medium priority.
Tue, Sep 29, 12:06 PM · Patch-For-Review, Platform Team Workboards (Green)
hnowlan created T264092: Restbase on buster .
Tue, Sep 29, 12:06 PM · Patch-For-Review, Platform Team Workboards (Green)

Sep 28 2020

hnowlan closed T263045: Favicon not appearing as Resolved.
Sep 28 2020, 3:21 PM · Platform Team Sprints Board (Sprint 4), Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan closed T256141: Remove/archive remaining legacy Change Propagation components as Resolved.
Sep 28 2020, 1:47 PM · Platform Team Workboards (Green), ChangeProp

Sep 24 2020

hnowlan added a comment to T261512: Provision new RESTBase/Cassandra cluster nodes: restbase1028, restbase1029, restbase1030.

Thanks for that!

Sep 24 2020, 4:59 PM · RESTBase-Cassandra, Platform Engineering, Cassandra
hnowlan added a comment to T261512: Provision new RESTBase/Cassandra cluster nodes: restbase1028, restbase1029, restbase1030.

April it seems https://gerrit.wikimedia.org/r/c/operations/dns/+/592725/
I was wondering whether something odd had happened tbh but couldn't find suitable documentation for managing the other entries.

Sep 24 2020, 3:53 PM · RESTBase-Cassandra, Platform Engineering, Cassandra

Sep 23 2020

hnowlan closed T254913: Integrate Envoy API Gateway into critical path, a subtask of T254794: Envoy API Gateway Implementation, as Resolved.
Sep 23 2020, 3:07 PM · Platform Team Initiatives (API Gateway)
hnowlan closed T254913: Integrate Envoy API Gateway into critical path as Resolved.
Sep 23 2020, 3:07 PM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)

Sep 21 2020

hnowlan added a comment to T235277: Client Developer uses OAuth 2.0 for authorization.

Can this ticket be closed? JWTs from meta are now valid for use with the gateway.

Sep 21 2020, 3:31 PM · Patch-For-Review, Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway), Story
hnowlan moved T262551: CORS on API Gateway doesn't work when bearer token is provided from Ready to Deploy to PM Sign-off on the Platform Team Workboards (Green) board.
Sep 21 2020, 3:30 PM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T261512: Provision new RESTBase/Cassandra cluster nodes: restbase1028, restbase1029, restbase1030.

Which racks should these new hosts go onto? I am guessing one into each of a b and d, which are the eqiad racks atm (all at 4 hosts currently).

Sep 21 2020, 3:07 PM · RESTBase-Cassandra, Platform Engineering, Cassandra

Sep 18 2020

hnowlan moved T263045: Favicon not appearing from Backlog to Doing on the Platform Team Workboards (Green) board.
Sep 18 2020, 4:41 PM · Platform Team Sprints Board (Sprint 4), Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T254913: Integrate Envoy API Gateway into critical path from Next Sprint to Done on the Platform Team Workboards (Green) board.
Sep 18 2020, 4:41 PM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T262490: Upstream connect error on API Portal wiki from Doing to Done on the Platform Team Workboards (Green) board.
Sep 18 2020, 4:41 PM · Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T262490: Upstream connect error on API Portal wiki.

Based on the graph linked above and the lack of reports I'm going to close this for now - if anyone sees this again please reopen and let me know a rough timestamp!

Sep 18 2020, 4:41 PM · Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan claimed T263045: Favicon not appearing.
Sep 18 2020, 2:14 PM · Platform Team Sprints Board (Sprint 4), Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T262396: API Gateway doesn't respect mwdebug headers from Waiting for Review to Done on the Platform Team Workboards (Green) board.
Sep 18 2020, 1:54 PM · Platform Team Initiatives (API Gateway), Platform Team Workboards (Green)
hnowlan added a comment to T262396: API Gateway doesn't respect mwdebug headers.

All mwdebug servers now work in API gateway

Sep 18 2020, 10:33 AM · Platform Team Initiatives (API Gateway), Platform Team Workboards (Green)

Sep 17 2020

hnowlan moved T256141: Remove/archive remaining legacy Change Propagation components from Next Sprint to Done on the Platform Team Workboards (Green) board.
Sep 17 2020, 12:02 PM · Platform Team Workboards (Green), ChangeProp

Sep 16 2020

hnowlan added a member for MW-on-K8s: hnowlan.
Sep 16 2020, 3:04 PM
hnowlan added a comment to T254913: Integrate Envoy API Gateway into critical path.

I'm not clear on what this ticket is going to accomplish or look like. Tempted to suggest closing. The language is a bit wooly

Sep 16 2020, 11:55 AM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T262490: Upstream connect error on API Portal wiki from Backlog to Doing on the Platform Team Workboards (Green) board.
Sep 16 2020, 11:54 AM · Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T262490: Upstream connect error on API Portal wiki.

I'm still seeing this error in the logs, which is concerning. However, less concerning is not seeing any more active connections being closed: https://grafana.wikimedia.org/d/UOH-5IDMz/api-gateway?viewPanel=38&orgId=1&from=1600161750381&to=1600248150381&refresh=30s&var-datasource=codfw%20prometheus%2Fk8s

Sep 16 2020, 9:29 AM · Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)

Sep 15 2020

hnowlan added a comment to T262490: Upstream connect error on API Portal wiki.

My guess is that the empty message happens because this loop never gets an iteration, hence the empty string. https://github.com/envoyproxy/envoy/blob/v1.15.0/source/extensions/transport_sockets/tls/ssl_socket.cc#L207

Sep 15 2020, 12:03 PM · Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)

Sep 14 2020

hnowlan added a comment to T262490: Upstream connect error on API Portal wiki.

I don't understand SSL shutdown: rc=-1 - doesn't look like anyone has ever hit this before. Weirdly ssl_socket.cc:225 _should_ be reporting details about an error https://github.com/envoyproxy/envoy/blob/v1.15.0/source/extensions/transport_sockets/tls/ssl_socket.cc#L225

Sep 14 2020, 4:01 PM · Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T262490: Upstream connect error on API Portal wiki.

some visibility of when this is happening (with no how for now) https://grafana.wikimedia.org/d/UOH-5IDMz/api-gateway?orgId=1&from=1599637368274&to=1599846893581&var-datasource=codfw%20prometheus%2Fk8s&viewPanel=38

Sep 14 2020, 3:41 PM · Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan closed T254910: Metrics and dashboards for API Gateway as Resolved.
Sep 14 2020, 10:14 AM · Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan closed T254910: Metrics and dashboards for API Gateway, a subtask of T254794: Envoy API Gateway Implementation, as Resolved.
Sep 14 2020, 10:14 AM · Platform Team Initiatives (API Gateway)
hnowlan moved T262551: CORS on API Gateway doesn't work when bearer token is provided from Backlog to PM Sign-off on the Platform Team Workboards (Green) board.
Sep 14 2020, 10:13 AM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T254910: Metrics and dashboards for API Gateway from Blocked to Waiting for Review on the Platform Team Workboards (Green) board.
Sep 14 2020, 9:34 AM · Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan updated the task description for T254910: Metrics and dashboards for API Gateway.
Sep 14 2020, 9:34 AM · Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)

Sep 11 2020

hnowlan added a comment to T262551: CORS on API Gateway doesn't work when bearer token is provided.

The CORS issues related to this error have been resolved. The request to portal now returns a 403 when using the token which comes directly from Mediawiki and could be related to the permissions granted to it: {"error":"rest-read-denied","httpCode":403,"httpReason":"Forbidden"}. This same error can be seen when using the same token directly against the non-gatewayed APIs.

Sep 11 2020, 2:33 PM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)

Sep 10 2020

hnowlan claimed T262490: Upstream connect error on API Portal wiki.
Sep 10 2020, 2:18 PM · Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan created T262546: api-gateway should ship logs to logstash.
Sep 10 2020, 2:13 PM · Platform Team Initiatives (API Gateway), Platform Team Workboards (Green)
hnowlan added a comment to T246270: Administrator sets flat rate limit for API calls.

I tested this this morning, hitting the rate limit with a token. You can see my client being blocked here: https://grafana.wikimedia.org/d/UOH-5IDMz/api-gateway?orgId=1&from=1599735245049&to=1599735686701&var-datasource=codfw%20prometheus%2Fk8s&viewPanel=34

Sep 10 2020, 12:57 PM · Platform Team Workboards (Green), Story, Platform Team Initiatives (API Gateway)
hnowlan added a comment to T256769: Client Developer makes unauthenticated sample API calls.

When a JWT is provided, we can see the POST going through to mediawiki as this localised error is not from Envoy.

$ curl -H "Authorization: Bearer $TOKEN" -XPOST -H 'Content-Length: 0' 'https://api.wikimedia.org/core/v1/wikipedia/en/search/page?q=pizza'
{"messageTranslations":{"en":"The request method (POST) was not the allowed method for this path (GET)"},"httpCode":405,"httpReason":"Method Not Allowed"}
Sep 10 2020, 10:05 AM · Patch-For-Review, Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Story, Platform Team Initiatives (API Gateway)

Sep 9 2020

hnowlan added a comment to T261425: Configure API Portal wiki.

It turns out that adding a user to docseditor fixes this issue - but our change was in theory supposed to make bureaucrat automatically part of that group.

Sep 9 2020, 4:39 PM · MW-1.36-notes (1.36.0-wmf.9; 2020-09-15), Patch-For-Review, Platform Team Sprints Board (Sprint 3), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T261425: Configure API Portal wiki from Ready to Deploy to User Story Review on the Platform Team Workboards (Green) board.
Sep 9 2020, 11:37 AM · MW-1.36-notes (1.36.0-wmf.9; 2020-09-15), Patch-For-Review, Platform Team Sprints Board (Sprint 3), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T261425: Configure API Portal wiki.

The new config has been deployed and the wiki is now reskinned and locked down.

Sep 9 2020, 11:36 AM · MW-1.36-notes (1.36.0-wmf.9; 2020-09-15), Patch-For-Review, Platform Team Sprints Board (Sprint 3), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a project to T262396: API Gateway doesn't respect mwdebug headers: Platform Team Initiatives (API Gateway).
Sep 9 2020, 11:34 AM · Platform Team Initiatives (API Gateway), Platform Team Workboards (Green)
hnowlan triaged T262396: API Gateway doesn't respect mwdebug headers as Medium priority.
Sep 9 2020, 11:34 AM · Platform Team Initiatives (API Gateway), Platform Team Workboards (Green)
hnowlan created T262396: API Gateway doesn't respect mwdebug headers.
Sep 9 2020, 11:33 AM · Platform Team Initiatives (API Gateway), Platform Team Workboards (Green)

Sep 8 2020

hnowlan moved T261425: Configure API Portal wiki from Waiting for Review to Ready to Deploy on the Platform Team Workboards (Green) board.
Sep 8 2020, 3:16 PM · MW-1.36-notes (1.36.0-wmf.9; 2020-09-15), Patch-For-Review, Platform Team Sprints Board (Sprint 3), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)

Sep 7 2020

hnowlan moved T254910: Metrics and dashboards for API Gateway from Doing to Blocked on the Platform Team Workboards (Green) board.
Sep 7 2020, 3:01 PM · Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T254910: Metrics and dashboards for API Gateway.

Dashboard is looking okay, this is 90% done. Moving to blocked until T235277 is unblocked - can't graph non-anonymous keys until we have actual usage metrics.

Sep 7 2020, 3:01 PM · Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T261425: Configure API Portal wiki from Doing to Waiting for Review on the Platform Team Workboards (Green) board.
Sep 7 2020, 3:00 PM · MW-1.36-notes (1.36.0-wmf.9; 2020-09-15), Patch-For-Review, Platform Team Sprints Board (Sprint 3), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T246946: Prepare and check storage layer for api.wikimedia.org.

This wiki is now live, user creation should be enabled.

Sep 7 2020, 10:15 AM · Data-Services, cloud-services-team (Kanban), Platform Team Initiatives (API Gateway), DBA

Sep 3 2020

hnowlan moved T256765: Client Developer reads pages on API Portal from Doing to User Story Review on the Platform Team Workboards (Green) board.
Sep 3 2020, 3:13 PM · Platform Team Sprints Board (Sprint 2), Platform Team Workboards (Green), Story, Platform Team Initiatives (API Gateway)
hnowlan moved T261425: Configure API Portal wiki from Ready to Doing on the Platform Team Workboards (Green) board.
Sep 3 2020, 3:13 PM · MW-1.36-notes (1.36.0-wmf.9; 2020-09-15), Patch-For-Review, Platform Team Sprints Board (Sprint 3), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan updated the task description for T246945: New Public Wiki for the API Portal.
Sep 3 2020, 2:24 PM · Platform Team Workboards (Green), MW-1.35-notes (1.35.0-wmf.40; 2020-07-07), Patch-For-Review, Release-Engineering-Team-TODO, Platform Team Initiatives (API Gateway), User-brennen, User-Ladsgroup, Wiki-Setup (Create), User-Urbanecm, Platform Engineering
hnowlan added a comment to T254910: Metrics and dashboards for API Gateway.

Dashboard is at https://grafana.wikimedia.org/d/UOH-5IDMz/api-gateway?orgId=1&refresh=30s

Sep 3 2020, 1:25 PM · Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T259296: Filter cookie headers for all API route requests.


Here cookies can be seen being set by the API portal

Sep 3 2020, 1:03 PM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T259296: Filter cookie headers for all API route requests.

Cookies being set by the REST API

nosmo@ocasey ~ $ curl -v https://en.wikipedia.org/w/rest.php/v1/search/page?q=pizza -o /dev/null 2>&1 | grep -i cookie
< set-cookie: WMF-Last-Access=03-Sep-2020;Path=/;HttpOnly;secure;Expires=Mon, 05 Oct 2020 12:00:00 GMT
< set-cookie: WMF-Last-Access-Global=03-Sep-2020;Path=/;Domain=.wikipedia.org;HttpOnly;secure;Expires=Mon, 05 Oct 2020 12:00:00 GMT
< set-cookie: GeoIP=IE:L:Dublin:etc:v4; Path=/; secure; Domain=.wikipedia.org
Sep 3 2020, 12:59 PM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T256765: Client Developer reads pages on API Portal.

Portal wiki is now live https://api.wikimedia.org/wiki/Main_Page (If foundation wiki still shows it's either puppet lag or browser cache)

Sep 3 2020, 12:52 PM · Platform Team Sprints Board (Sprint 2), Platform Team Workboards (Green), Story, Platform Team Initiatives (API Gateway)

Aug 31 2020

hnowlan added a comment to T246946: Prepare and check storage layer for api.wikimedia.org.

This wiki is waiting on apache configuration so users can't be created yet - I'll update when that is set up.

Aug 31 2020, 2:03 PM · Data-Services, cloud-services-team (Kanban), Platform Team Initiatives (API Gateway), DBA
hnowlan added a comment to T246946: Prepare and check storage layer for api.wikimedia.org.

@Marostegui confirming that it was created on the 27th.

Aug 31 2020, 10:14 AM · Data-Services, cloud-services-team (Kanban), Platform Team Initiatives (API Gateway), DBA

Aug 27 2020

hnowlan claimed T254910: Metrics and dashboards for API Gateway.
Aug 27 2020, 3:50 PM · Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T254910: Metrics and dashboards for API Gateway from Next Sprint to Ready on the Platform Team Workboards (Green) board.
Aug 27 2020, 3:50 PM · Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T235277: Client Developer uses OAuth 2.0 for authorization from Doing to Blocked on the Platform Team Workboards (Green) board.
Aug 27 2020, 3:49 PM · Patch-For-Review, Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway), Story
hnowlan added a comment to T235277: Client Developer uses OAuth 2.0 for authorization.

Our OAuth2 tokens do not specify issuer. This isn't a violation of the standard but Envoy 1.15 insists on having this specified - there is a fix in Envoy 1.16 . I think I can hack around this short-term, but until that's done we can't use Mediawiki's tokens with Envoy.

Aug 27 2020, 2:49 PM · Patch-For-Review, Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway), Story

Aug 26 2020

hnowlan moved T235277: Client Developer uses OAuth 2.0 for authorization from Ready to Doing on the Platform Team Workboards (Green) board.
Aug 26 2020, 2:19 PM · Patch-For-Review, Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway), Story
hnowlan claimed T235277: Client Developer uses OAuth 2.0 for authorization.
Aug 26 2020, 2:19 PM · Patch-For-Review, Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway), Story
hnowlan added a comment to T235277: Client Developer uses OAuth 2.0 for authorization.

Where is wikimedia.token coming from in this case?

Aug 26 2020, 10:01 AM · Patch-For-Review, Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway), Story

Aug 25 2020

hnowlan added a comment to T246946: Prepare and check storage layer for api.wikimedia.org.

Just a heads-up - The parent task is going to be un-stalled soon hopefully. The wiki will be visible to the public, with some restrictions on edits so I think replicating to WMCS is okay.

Aug 25 2020, 4:41 PM · Data-Services, cloud-services-team (Kanban), Platform Team Initiatives (API Gateway), DBA
hnowlan moved T259296: Filter cookie headers for all API route requests from Waiting for Review to User Story Review on the Platform Team Workboards (Green) board.
Aug 25 2020, 1:56 PM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan added a comment to T259296: Filter cookie headers for all API route requests.

The gateway now filters all set-cookies in responses and all cookies from incoming requests. Varnish cookies remain, however.

Aug 25 2020, 11:40 AM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)

Aug 24 2020

hnowlan updated the task description for T246945: New Public Wiki for the API Portal.
Aug 24 2020, 2:04 PM · Platform Team Workboards (Green), MW-1.35-notes (1.35.0-wmf.40; 2020-07-07), Patch-For-Review, Release-Engineering-Team-TODO, Platform Team Initiatives (API Gateway), User-brennen, User-Ladsgroup, Wiki-Setup (Create), User-Urbanecm, Platform Engineering
hnowlan added a comment to T260795: Client Developer gets machine-readable results for failed routes.

Deployed

Aug 24 2020, 11:35 AM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)

Aug 14 2020

hnowlan added a comment to T235277: Client Developer uses OAuth 2.0 for authorization.
nosmo@ocasey ~ $ curl -H "Authorization: Bearer BAD_TOKEN" https://api.wikimedia.org/core/v1/wikipedia/zh/foo/abc && echo
Jwt is not in the form of Header.Payload.Signature with two dots and 3 sections

This demonstrates that the headers are being passed properly and not mangled by envoy before being checked.

Aug 14 2020, 4:00 PM · Patch-For-Review, Platform Team Sprints Board (Sprint 1), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway), Story
hnowlan added a comment to T235276: Client Developer uses MediaWiki REST API.

This routing can be tested on https://api.wikimedia.org.

Aug 14 2020, 3:58 PM · Platform Team Sprints Board (Sprint 2), Platform Team Workboards (Green), Platform Team Initiatives (API Gateway), Story
hnowlan added a comment to T256765: Client Developer reads pages on API Portal.

Currently we don't have a wiki to test but we can see the routing difference in that accessing api.wiimedia.org/wiki returns errors from the appservers and API URLs return API results.

Aug 14 2020, 3:30 PM · Platform Team Sprints Board (Sprint 2), Platform Team Workboards (Green), Story, Platform Team Initiatives (API Gateway)
hnowlan added a comment to T256771: Client Developer makes an API call from the Web browser.

Example:

nosmo@ocasey ~/ $ curl https://api.wikimedia.org/wiki/Test > /dev/null -v 2>&1 | grep access
# No output
nosmo@ocasey ~/ $ curl -v -H "Host: api.wikimedia.org" https://api.wikimedia.org/core/v1/wikipedia/en/page/Dublin -o /dev/null 2>&1 -H "Origin: example.com" | grep -i access
< access-control-allow-origin: example.com
Aug 14 2020, 2:58 PM · Platform Team Sprints Board (Sprint 2), Platform Team Workboards (Green), Story, Platform Team Initiatives (API Gateway)
hnowlan added a comment to T246265: Client Developer uses Wikifeeds API.

Example URL: https://api.wikimedia.org/feed/v1/wikipedia/en/announcements

Aug 14 2020, 2:24 PM · Platform Team Sprints Board (Sprint 2), Platform Team Workboards (Green), Story, Platform Team Initiatives (API Gateway)
hnowlan moved T259294: Configure API Portal to only send session cookie to its own routes from Next Sprint to Waiting for Review on the Platform Team Workboards (Green) board.
Aug 14 2020, 11:12 AM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan claimed T259294: Configure API Portal to only send session cookie to its own routes.
Aug 14 2020, 11:12 AM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan moved T259296: Filter cookie headers for all API route requests from Next Sprint to Waiting for Review on the Platform Team Workboards (Green) board.
Aug 14 2020, 11:12 AM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan created P12258 api-gateway stripping cookies.
Aug 14 2020, 10:58 AM
hnowlan claimed T259296: Filter cookie headers for all API route requests.
Aug 14 2020, 10:02 AM · Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)
hnowlan closed T254908: API Gateway LVS Endpoint, a subtask of T254794: Envoy API Gateway Implementation, as Resolved.
Aug 14 2020, 9:47 AM · Platform Team Initiatives (API Gateway)
hnowlan closed T254908: API Gateway LVS Endpoint as Resolved.
Aug 14 2020, 9:47 AM · Platform Team Sprints Board (Sprint 2), Patch-For-Review, Platform Team Workboards (Green), Platform Team Initiatives (API Gateway)

Aug 12 2020

hnowlan moved T246265: Client Developer uses Wikifeeds API from Waiting for Review to User Story Review on the Platform Team Workboards (Green) board.
Aug 12 2020, 2:38 PM · Platform Team Sprints Board (Sprint 2), Platform Team Workboards (Green), Story, Platform Team Initiatives (API Gateway)