[Labs-l] [Labs-announce] Public DNS and Proxy changes coming up this weekend

[Marko Obrovac]

On 24 March 2016 at 11:11, Marko Obrovac <mobrovac at wikimedia.org> wrote:

> Hello,
>
> On 23 March 2016 at 23:44, Andrew Bogott <abogott at wikimedia.org> wrote:
>
>> == Executive Summary ==
>>
>> Creation of new web proxies and DNS records will be disabled over the
>> weekend; Labs and Tools will switch to a new public DNS system on Monday,
>> with possible accompanying hiccups and interruptions.
>>
>> Nothing will change for ToolLabs users, and no immediate action is
>> required on the part of tool or project maintainers.  Starting Monday,
>> however, Labs project maintainers will need to use the Horizon[1] web UI to
>> manage proxies, manage public DNS records, and assign floating IPs to
>> instances.
>>
>> Labs Project Admins:  Two-factor authentication will be required to
>> access the new Horizon interface.  Please set up 2fa now (via Preferences->
>> User Profile on Wikitech) so that you aren't rudely surprised when trying
>> to manage Horizon during future emergencies.
>>
>
> I've set up 2FA successfully and I can now log in to horizon.wikimedia.org,
> but I can't log in any more on wikitech :/ Neither my password nor the
> provided 6-code digit work. Whatever I type in there I'm getting "The
> two-factor authentication token provided was invalid.". Is this a known
> issue? Or am I doing something wrong?
>

Euh, nevermind. That was me being ignorant. It's not entering either of the
two, I needed to put in both my password **and** the token :P Life's good
again.


>
> Cheers,
> Marko
>
>
>>
>> == The whole story ==
>>
>> Currently the public DNS server that resolves things under wmflabs.org
>> is running an old and creaky setup using ldap and powerdns.  These domains
>> are configured using WMF-developed features on wikitech.  Labs internal dns
>> (e.g. foo.bar.eqiad.wmflabs) is now managed by the OpenStack Designate
>> project with a more modern mysql-based powerdns backend.
>>
>> There's a ready-made upstream web UI for designate[2] that is part of the
>> Horizon project.  So, we're going to standardize on Designate, Horizon, and
>> mysql/powerdns, and rip out the old ldap/pdns/wikitech code[3].  Web proxy
>> management is intimately linked with dns management, so the proxy UI will
>> also move to Horizon, thanks to a custom Horizon panel written by Alex Monk.
>>
>> Timeline:
>>
>> This week:  Various web Domain and Proxy UIs will appear and disappear
>> from horizon.wikimedia.org as we put the finishing touches on the new
>> interface.  Changes made via these interfaces will have no effect on public
>> DNS before Monday; on Monday some such changes may persist and some may be
>> overwritten.
>>
>> Friday, 2015-03-27:  A few sidebar links on wikitech will vanish:  "
>> Manage Addresses," and " Manage Web Proxies."  During the following days,
>> public DNS will be effectively frozen so that we have time to safely
>> migrate to the new setup.
>>
>> Friday (and, possibly, weekend):  DNS migration to designate, testing
>>
>> Monday, 2015-03-30, 18:00 UTC:  The public dns servers labs-ns0 and
>> labs-ns1 will be moved to point to the new DNS service.  There may be brief
>> interruptions to public DNS during the switch-over.  The Horizon web UI for
>> domains and proxies will be live and available to all project admins.
>>
>>
>>
>> [1] https://wikitech.wikimedia.org/wiki/Help:Horizon_FAQ
>> [2] https://github.com/openstack/designate-dashboard
>> [3] https://phabricator.wikimedia.org/T124184
>>
>> _______________________________________________
>> Labs-announce mailing list
>> Labs-announce at lists.wikimedia.org
>> https://lists.wikimedia.org/mailman/listinfo/labs-announce
>>
>> _______________________________________________
>> Labs-l mailing list
>> Labs-l at lists.wikimedia.org
>> https://lists.wikimedia.org/mailman/listinfo/labs-l
>>
>>
>
>
> --
> Marko Obrovac, PhD
> Senior Services Engineer
> Wikimedia Foundation
>



-- 
Marko Obrovac, PhD
Senior Services Engineer
Wikimedia Foundation
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20160324/2ceca6b7/attachment.html>