I logged in to the instance, and ran puppet agent --test --verbose, and I get the following error message:

Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Could not find class role::lockdown for annotate-wiki.annotation.eqiad1.wikimedia.cloud on node annotate-wiki.annotation.eqiad1.wikimedia.cloud


I also used codesearch to search for any other use of lockdown in the Puppet files, I am probably addressing the role wrong, but I couldn't find any other example of usage besides mine (and that's wrong)





On Wed, Apr 21, 2021 at 4:53 PM Denny Vrandečić <dvrandecic@wikimedia.org> wrote:
Thank you so much, Bryan!

So I followed

https://wikitech.wikimedia.org/wiki/Help:Puppet

(which describes a slightly different UX than what I see, in particular, there is nothing to browse but just an edit window) to add 

role::lockdown

to my Puppet file. But that seems to have no effect on the Annotation wiki.

Here are my puppet role files:

https://gerrit.wikimedia.org/r/plugins/gitiles/cloud/instance-puppet/+/master/annotation/_.roles 

and, trying to repeat it on the instance, here:

https://gerrit.wikimedia.org/r/plugins/gitiles/cloud/instance-puppet/+/master/annotation/annotate-wiki.annotation.eqiad1.wikimedia.cloud.roles 

But my Wiki hasn't changed.

Is there an additional step required after editing the role file in Horizon? When using vagrant, I would need to provision that - but the Help:Puppet page above doesn't mention anything like that.

Thanks for your help!
Denny




On Wed, Apr 21, 2021 at 12:09 PM Bryan Davis <bd808@wikimedia.org> wrote:
On Wed, Apr 21, 2021 at 1:05 PM Denny Vrandečić
<dvrandecic@wikimedia.org> wrote:
>
> Hi Alex,
>
> thank you! Yes, you are absolutely right, that's what I would like to try - but what I don't understand is where and how do I edit the LocalSettings for a MediaWiki instance provisioned on WMCloud via Vagrant?

https://www.mediawiki.org/wiki/MediaWiki-Vagrant#MediaWiki_settings

MediaWiki-Vagrant also has role::lockdown for the lockdown use case:
https://github.com/wikimedia/mediawiki-vagrant/blob/master/puppet/modules/role/manifests/lockdown.pp

Gergo may be able to tell you how he has setup
https://wikispore.wmflabs.org/wiki/Main_Page with OAuth for account
registration. I have a hunch that is also possible by adding the
correct mw-vagrant role and settings.

Bryan
--
Bryan Davis              Technical Engagement      Wikimedia Foundation
Principal Software Engineer                               Boise, ID USA
[[m:User:BDavis_(WMF)]]                                      irc: bd808

_______________________________________________
Wikimedia Cloud Services mailing list
Cloud@lists.wikimedia.org (formerly labs-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/cloud