[Labs-l] [Labs-announce] Public DNS and Proxy changes coming up this weekend

[Andrew Bogott]

On 3/24/16 9:19 AM, Moritz Schubotz wrote:
> Hi Andrew,
>
> now, it works nicely. I don't know what was wrong but there were no
> messages the other day
> for example instead of
That's great!  Whoever fixed that, take a bow :)

-A


> Download a mobile app for two-factor authentication (such as Google
> Authenticator) on to your phone.
>
> it showed
>
> <oathauth-step1-test>
>
> So I'm now set up as two factor auth user.
>
> Best
> Moritz
>
> On Thu, Mar 24, 2016 at 10:10 AM, Andrew Bogott <abogott at wikimedia.org> wrote:
>> On 3/23/16 6:42 PM, Moritz Schubotz wrote:
>>> Hi Andrew,
>>>
>>> enabling two factor authentification looks not very well documented.
>>> I see no text just the i18n labels
>>> <oathauth-step1-test>
>>> Is there a guide?
>>
>> Can you send me a screenshot of what you're seeing?  When I setup 2fa there
>> are clear step-by-step instructions on the page that displays the initial QR
>> code.
>>
>> -A
>>
>>
>>> Best
>>> Moritz
>>>
>>>
>>> On Wed, Mar 23, 2016 at 6:44 PM, Andrew Bogott <abogott at wikimedia.org>
>>> wrote:
>>>> == Executive Summary ==
>>>>
>>>> Creation of new web proxies and DNS records will be disabled over the
>>>> weekend; Labs and Tools will switch to a new public DNS system on Monday,
>>>> with possible accompanying hiccups and interruptions.
>>>>
>>>> Nothing will change for ToolLabs users, and no immediate action is
>>>> required
>>>> on the part of tool or project maintainers.  Starting Monday, however,
>>>> Labs
>>>> project maintainers will need to use the Horizon[1] web UI to manage
>>>> proxies, manage public DNS records, and assign floating IPs to instances.
>>>>
>>>> Labs Project Admins:  Two-factor authentication will be required to
>>>> access
>>>> the new Horizon interface.  Please set up 2fa now (via Preferences-> User
>>>> Profile on Wikitech) so that you aren't rudely surprised when trying to
>>>> manage Horizon during future emergencies.
>>>>
>>>> == The whole story ==
>>>>
>>>> Currently the public DNS server that resolves things under wmflabs.org is
>>>> running an old and creaky setup using ldap and powerdns.  These domains
>>>> are
>>>> configured using WMF-developed features on wikitech.  Labs internal dns
>>>> (e.g. foo.bar.eqiad.wmflabs) is now managed by the OpenStack Designate
>>>> project with a more modern mysql-based powerdns backend.
>>>>
>>>> There's a ready-made upstream web UI for designate[2] that is part of the
>>>> Horizon project.  So, we're going to standardize on Designate, Horizon,
>>>> and
>>>> mysql/powerdns, and rip out the old ldap/pdns/wikitech code[3].  Web
>>>> proxy
>>>> management is intimately linked with dns management, so the proxy UI will
>>>> also move to Horizon, thanks to a custom Horizon panel written by Alex
>>>> Monk.
>>>>
>>>> Timeline:
>>>>
>>>> This week:  Various web Domain and Proxy UIs will appear and disappear
>>>> from
>>>> horizon.wikimedia.org as we put the finishing touches on the new
>>>> interface.
>>>> Changes made via these interfaces will have no effect on public DNS
>>>> before
>>>> Monday; on Monday some such changes may persist and some may be
>>>> overwritten.
>>>>
>>>> Friday, 2015-03-27:  A few sidebar links on wikitech will vanish:  "
>>>> Manage
>>>> Addresses," and " Manage Web Proxies."  During the following days, public
>>>> DNS will be effectively frozen so that we have time to safely migrate to
>>>> the
>>>> new setup.
>>>>
>>>> Friday (and, possibly, weekend):  DNS migration to designate, testing
>>>>
>>>> Monday, 2015-03-30, 18:00 UTC:  The public dns servers labs-ns0 and
>>>> labs-ns1
>>>> will be moved to point to the new DNS service.  There may be brief
>>>> interruptions to public DNS during the switch-over.  The Horizon web UI
>>>> for
>>>> domains and proxies will be live and available to all project admins.
>>>>
>>>>
>>>>
>>>> [1] https://wikitech.wikimedia.org/wiki/Help:Horizon_FAQ
>>>> [2] https://github.com/openstack/designate-dashboard
>>>> [3] https://phabricator.wikimedia.org/T124184
>>>>
>>>> _______________________________________________
>>>> Labs-announce mailing list
>>>> Labs-announce at lists.wikimedia.org
>>>> https://lists.wikimedia.org/mailman/listinfo/labs-announce
>>>>
>>>> _______________________________________________
>>>> Labs-l mailing list
>>>> Labs-l at lists.wikimedia.org
>>>> https://lists.wikimedia.org/mailman/listinfo/labs-l
>>>>
>>>
>
>