[Labs-l] [Labs-announce] Public DNS and Proxy changes coming up this weekend

[Andrew Bogott]

== Executive Summary ==

Creation of new web proxies and DNS records will be disabled over the 
weekend; Labs and Tools will switch to a new public DNS system on 
Monday, with possible accompanying hiccups and interruptions.

Nothing will change for ToolLabs users, and no immediate action is 
required on the part of tool or project maintainers.  Starting Monday, 
however, Labs project maintainers will need to use the Horizon[1] web UI 
to manage proxies, manage public DNS records, and assign floating IPs to 
instances.

Labs Project Admins:  Two-factor authentication will be required to 
access the new Horizon interface.  Please set up 2fa now (via 
Preferences-> User Profile on Wikitech) so that you aren't rudely 
surprised when trying to manage Horizon during future emergencies.

== The whole story ==

Currently the public DNS server that resolves things under wmflabs.org 
is running an old and creaky setup using ldap and powerdns.  These 
domains are configured using WMF-developed features on wikitech.  Labs 
internal dns (e.g. foo.bar.eqiad.wmflabs) is now managed by the 
OpenStack Designate project with a more modern mysql-based powerdns backend.

There's a ready-made upstream web UI for designate[2] that is part of 
the Horizon project.  So, we're going to standardize on Designate, 
Horizon, and mysql/powerdns, and rip out the old ldap/pdns/wikitech 
code[3].  Web proxy management is intimately linked with dns management, 
so the proxy UI will also move to Horizon, thanks to a custom Horizon 
panel written by Alex Monk.

Timeline:

This week:  Various web Domain and Proxy UIs will appear and disappear 
from horizon.wikimedia.org as we put the finishing touches on the new 
interface.  Changes made via these interfaces will have no effect on 
public DNS before Monday; on Monday some such changes may persist and 
some may be overwritten.

Friday, 2015-03-27:  A few sidebar links on wikitech will vanish:  " 
Manage Addresses," and " Manage Web Proxies."  During the following 
days, public DNS will be effectively frozen so that we have time to 
safely migrate to the new setup.

Friday (and, possibly, weekend):  DNS migration to designate, testing

Monday, 2015-03-30, 18:00 UTC:  The public dns servers labs-ns0 and 
labs-ns1 will be moved to point to the new DNS service.  There may be 
brief interruptions to public DNS during the switch-over.  The Horizon 
web UI for domains and proxies will be live and available to all project 
admins.



[1] https://wikitech.wikimedia.org/wiki/Help:Horizon_FAQ
[2] https://github.com/openstack/designate-dashboard
[3] https://phabricator.wikimedia.org/T124184
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20160323/a810c27e/attachment.html>
-------------- next part --------------
_______________________________________________
Labs-announce mailing list
Labs-announce at lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/labs-announce