[Labs-l] [Labs-announce] Public DNS and Proxy changes coming up this weekend

[Marko Obrovac]

Hello,

On 23 March 2016 at 23:44, Andrew Bogott <abogott at wikimedia.org> wrote:

> == Executive Summary ==
>
> Creation of new web proxies and DNS records will be disabled over the
> weekend; Labs and Tools will switch to a new public DNS system on Monday,
> with possible accompanying hiccups and interruptions.
>
> Nothing will change for ToolLabs users, and no immediate action is
> required on the part of tool or project maintainers.  Starting Monday,
> however, Labs project maintainers will need to use the Horizon[1] web UI to
> manage proxies, manage public DNS records, and assign floating IPs to
> instances.
>
> Labs Project Admins:  Two-factor authentication will be required to access
> the new Horizon interface.  Please set up 2fa now (via Preferences-> User
> Profile on Wikitech) so that you aren't rudely surprised when trying to
> manage Horizon during future emergencies.
>

I've set up 2FA successfully and I can now log in to horizon.wikimedia.org,
but I can't log in any more on wikitech :/ Neither my password nor the
provided 6-code digit work. Whatever I type in there I'm getting "The
two-factor authentication token provided was invalid.". Is this a known
issue? Or am I doing something wrong?

Cheers,
Marko


>
> == The whole story ==
>
> Currently the public DNS server that resolves things under wmflabs.org is
> running an old and creaky setup using ldap and powerdns.  These domains are
> configured using WMF-developed features on wikitech.  Labs internal dns
> (e.g. foo.bar.eqiad.wmflabs) is now managed by the OpenStack Designate
> project with a more modern mysql-based powerdns backend.
>
> There's a ready-made upstream web UI for designate[2] that is part of the
> Horizon project.  So, we're going to standardize on Designate, Horizon, and
> mysql/powerdns, and rip out the old ldap/pdns/wikitech code[3].  Web proxy
> management is intimately linked with dns management, so the proxy UI will
> also move to Horizon, thanks to a custom Horizon panel written by Alex Monk.
>
> Timeline:
>
> This week:  Various web Domain and Proxy UIs will appear and disappear
> from horizon.wikimedia.org as we put the finishing touches on the new
> interface.  Changes made via these interfaces will have no effect on public
> DNS before Monday; on Monday some such changes may persist and some may be
> overwritten.
>
> Friday, 2015-03-27:  A few sidebar links on wikitech will vanish:  "
> Manage Addresses," and " Manage Web Proxies."  During the following days,
> public DNS will be effectively frozen so that we have time to safely
> migrate to the new setup.
>
> Friday (and, possibly, weekend):  DNS migration to designate, testing
>
> Monday, 2015-03-30, 18:00 UTC:  The public dns servers labs-ns0 and
> labs-ns1 will be moved to point to the new DNS service.  There may be brief
> interruptions to public DNS during the switch-over.  The Horizon web UI for
> domains and proxies will be live and available to all project admins.
>
>
>
> [1] https://wikitech.wikimedia.org/wiki/Help:Horizon_FAQ
> [2] https://github.com/openstack/designate-dashboard
> [3] https://phabricator.wikimedia.org/T124184
>
> _______________________________________________
> Labs-announce mailing list
> Labs-announce at lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/labs-announce
>
> _______________________________________________
> Labs-l mailing list
> Labs-l at lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/labs-l
>
>


-- 
Marko Obrovac, PhD
Senior Services Engineer
Wikimedia Foundation
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20160324/d0d7b5e8/attachment.html>