[Labs-l] [Labs-announce] Public DNS and Proxy changes coming up this weekend

[Alex Monk]

Caused by some OATHAuth changes (https://gerrit.wikimedia.org/r/#/c/279253/)
that happened to be going through at the time which didn't get deployed
properly, was fixed by an unrelated scap an hour or two later. See
https://phabricator.wikimedia.org/T130800
>From SAL:

   - 22:17 logmsgbot: csteipp at tin Synchronized
   php-1.27.0-wmf.18/extensions/OATHAuth: Deploy HTMLForm update for OATH
   (duration: 00m 30s)
   - 23:39 logmsgbot: catrope at tin Started scap: Oops, Echo had i18n changes
   - 00:06 logmsgbot: catrope at tin Finished scap: Oops, Echo had i18n
   changes (duration: 26m 50s)


On 24 March 2016 at 14:22, Andrew Bogott <abogott at wikimedia.org> wrote:

> On 3/24/16 9:19 AM, Moritz Schubotz wrote:
>
>> Hi Andrew,
>>
>> now, it works nicely. I don't know what was wrong but there were no
>> messages the other day
>> for example instead of
>>
> That's great!  Whoever fixed that, take a bow :)
>
> -A
>
>
> Download a mobile app for two-factor authentication (such as Google
>> Authenticator) on to your phone.
>>
>> it showed
>>
>> <oathauth-step1-test>
>>
>> So I'm now set up as two factor auth user.
>>
>> Best
>> Moritz
>>
>> On Thu, Mar 24, 2016 at 10:10 AM, Andrew Bogott <abogott at wikimedia.org>
>> wrote:
>>
>>> On 3/23/16 6:42 PM, Moritz Schubotz wrote:
>>>
>>>> Hi Andrew,
>>>>
>>>> enabling two factor authentification looks not very well documented.
>>>> I see no text just the i18n labels
>>>> <oathauth-step1-test>
>>>> Is there a guide?
>>>>
>>>
>>> Can you send me a screenshot of what you're seeing?  When I setup 2fa
>>> there
>>> are clear step-by-step instructions on the page that displays the
>>> initial QR
>>> code.
>>>
>>> -A
>>>
>>>
>>> Best
>>>> Moritz
>>>>
>>>>
>>>>
>>>> On Wed, Mar 23, 2016 at 6:44 PM, Andrew Bogott <abogott at wikimedia.org>
>>>> wrote:
>>>>
>>>>> == Executive Summary ==
>>>>>
>>>>> Creation of new web proxies and DNS records will be disabled over the
>>>>> weekend; Labs and Tools will switch to a new public DNS system on
>>>>> Monday,
>>>>> with possible accompanying hiccups and interruptions.
>>>>>
>>>>> Nothing will change for ToolLabs users, and no immediate action is
>>>>> required
>>>>> on the part of tool or project maintainers.  Starting Monday, however,
>>>>> Labs
>>>>> project maintainers will need to use the Horizon[1] web UI to manage
>>>>> proxies, manage public DNS records, and assign floating IPs to
>>>>> instances.
>>>>>
>>>>> Labs Project Admins:  Two-factor authentication will be required to
>>>>> access
>>>>> the new Horizon interface.  Please set up 2fa now (via Preferences->
>>>>> User
>>>>> Profile on Wikitech) so that you aren't rudely surprised when trying to
>>>>> manage Horizon during future emergencies.
>>>>>
>>>>> == The whole story ==
>>>>>
>>>>> Currently the public DNS server that resolves things under wmflabs.org
>>>>> is
>>>>> running an old and creaky setup using ldap and powerdns.  These domains
>>>>> are
>>>>> configured using WMF-developed features on wikitech.  Labs internal dns
>>>>> (e.g. foo.bar.eqiad.wmflabs) is now managed by the OpenStack Designate
>>>>> project with a more modern mysql-based powerdns backend.
>>>>>
>>>>> There's a ready-made upstream web UI for designate[2] that is part of
>>>>> the
>>>>> Horizon project.  So, we're going to standardize on Designate, Horizon,
>>>>> and
>>>>> mysql/powerdns, and rip out the old ldap/pdns/wikitech code[3].  Web
>>>>> proxy
>>>>> management is intimately linked with dns management, so the proxy UI
>>>>> will
>>>>> also move to Horizon, thanks to a custom Horizon panel written by Alex
>>>>> Monk.
>>>>>
>>>>> Timeline:
>>>>>
>>>>> This week:  Various web Domain and Proxy UIs will appear and disappear
>>>>> from
>>>>> horizon.wikimedia.org as we put the finishing touches on the new
>>>>> interface.
>>>>> Changes made via these interfaces will have no effect on public DNS
>>>>> before
>>>>> Monday; on Monday some such changes may persist and some may be
>>>>> overwritten.
>>>>>
>>>>> Friday, 2015-03-27:  A few sidebar links on wikitech will vanish:  "
>>>>> Manage
>>>>> Addresses," and " Manage Web Proxies."  During the following days,
>>>>> public
>>>>> DNS will be effectively frozen so that we have time to safely migrate
>>>>> to
>>>>> the
>>>>> new setup.
>>>>>
>>>>> Friday (and, possibly, weekend):  DNS migration to designate, testing
>>>>>
>>>>> Monday, 2015-03-30, 18:00 UTC:  The public dns servers labs-ns0 and
>>>>> labs-ns1
>>>>> will be moved to point to the new DNS service.  There may be brief
>>>>> interruptions to public DNS during the switch-over.  The Horizon web UI
>>>>> for
>>>>> domains and proxies will be live and available to all project admins.
>>>>>
>>>>>
>>>>>
>>>>> [1] https://wikitech.wikimedia.org/wiki/Help:Horizon_FAQ
>>>>> [2] https://github.com/openstack/designate-dashboard
>>>>> [3] https://phabricator.wikimedia.org/T124184
>>>>>
>>>>> _______________________________________________
>>>>> Labs-announce mailing list
>>>>> Labs-announce at lists.wikimedia.org
>>>>> https://lists.wikimedia.org/mailman/listinfo/labs-announce
>>>>>
>>>>> _______________________________________________
>>>>> Labs-l mailing list
>>>>> Labs-l at lists.wikimedia.org
>>>>> https://lists.wikimedia.org/mailman/listinfo/labs-l
>>>>>
>>>>>
>>>>
>>
>>
>
> _______________________________________________
> Labs-l mailing list
> Labs-l at lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/labs-l
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20160324/63b98cb7/attachment.html>