== Executive Summary ==
Creation of new web proxies and DNS records will be disabled over the
weekend; Labs and Tools will switch to a new public DNS system on
Monday, with possible accompanying hiccups and interruptions.
Nothing will change for ToolLabs users, and no immediate action is
required on the part of tool or project maintainers. Starting Monday,
however, Labs project maintainers will need to use the Horizon[1] web UI
to manage proxies, manage public DNS records, and assign floating IPs to
instances.
Labs Project Admins: Two-factor authentication will be required to
access the new Horizon interface. Please set up 2fa now (via
Preferences-> User Profile on Wikitech) so that you aren't rudely
surprised when trying to manage Horizon during future emergencies.
== The whole story ==
Currently the public DNS server that resolves things under wmflabs.org
is running an old and creaky setup using ldap and powerdns. These
domains are configured using WMF-developed features on wikitech. Labs
internal dns (e.g. foo.bar.eqiad.wmflabs) is now managed by the
OpenStack Designate project with a more modern mysql-based powerdns backend.
There's a ready-made upstream web UI for designate[2] that is part of
the Horizon project. So, we're going to standardize on Designate,
Horizon, and mysql/powerdns, and rip out the old ldap/pdns/wikitech
code[3]. Web proxy management is intimately linked with dns management,
so the proxy UI will also move to Horizon, thanks to a custom Horizon
panel written by Alex Monk.
Timeline:
This week: Various web Domain and Proxy UIs will appear and disappear
from horizon.wikimedia.org as we put the finishing touches on the new
interface. Changes made via these interfaces will have no effect on
public DNS before Monday; on Monday some such changes may persist and
some may be overwritten.
Friday, 2015-03-27: A few sidebar links on wikitech will vanish: "
Manage Addresses," and " Manage Web Proxies." During the following
days, public DNS will be effectively frozen so that we have time to
safely migrate to the new setup.
Friday (and, possibly, weekend): DNS migration to designate, testing
Monday, 2015-03-30, 18:00 UTC: The public dns servers labs-ns0 and
labs-ns1 will be moved to point to the new DNS service. There may be
brief interruptions to public DNS during the switch-over. The Horizon
web UI for domains and proxies will be live and available to all project
admins.
[1] https://wikitech.wikimedia.org/wiki/Help:Horizon_FAQ
[2] https://github.com/openstack/designate-dashboard
[3] https://phabricator.wikimedia.org/T124184
_______________________________________________
Labs-announce mailing list
labs-annou...@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/labs-announce
_______________________________________________
Labs-l mailing list
Labs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/labs-l
