[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-23 Thread Gehel 
Gehel closed this task as "Resolved".

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, Gehel
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-22 Thread RKemper 
RKemper moved this task from In Progress to Done on the Data-Platform-SRE 
(2024.01.22 - 2024.02.11) board.
RKemper added a comment.


  These 3 new services have their internal certs working with Envoy. Moving to 
Done and spun off https://phabricator.wikimedia.org/T355593 for the last 
cert-related work.

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

WORKBOARD
  https://phabricator.wikimedia.org/project/board/6928/

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-22 Thread Gehel 
Gehel triaged this task as "High" priority.

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

WORKBOARD
  https://phabricator.wikimedia.org/project/board/6928/

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, Gehel
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-22 Thread Gehel 
Gehel edited projects, added Data-Platform-SRE ( 2023/24 Q3 Milestone 2); 
removed Data-Platform-SRE (2023/24 Q3 Milestone 1).

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, Gehel
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-16 Thread Maintenance_bot 
Maintenance_bot removed a project: Patch-For-Review.

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, Maintenance_bot
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331, Isabelladantes1983, Themindcoder, Adamm71, Jersione, Hellket777, 
LisafBia6531, 786, Biggs657, Juan90264, Alter-paule, Beast1978, Un1tY, Hook696, 
Kent7301, joker88john, CucyNoiD, Gaboe420, Giuliamocci, Cpaulf30, Af420, 
Bsandipan, Lewizho99, Maathavan, Neuronton
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-16 Thread gerritbot 
gerritbot added a comment.


  Change 991089 **merged** by Ryan Kemper:
  
  [operations/puppet@production] wdqs graph-split: subdomain of 
query.wikidata.org
  
  https://gerrit.wikimedia.org/r/991089

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, gerritbot
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Isabelladantes1983, Themindcoder, Adamm71, Jersione, 
Hellket777, LisafBia6531, Astuthiodit_1, 786, Biggs657, karapayneWMDE, 
Invadibot, maantietaja, Juan90264, Alter-paule, Beast1978, ItamarWMDE, Un1tY, 
Akuckartz, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, 
Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, 
QZanden, EBjune, KimKelting, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Neuronton, Scott_WUaS, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-16 Thread gerritbot 
gerritbot added a comment.


  Change 991089 had a related patch set uploaded (by Ryan Kemper; author: Ryan 
Kemper):
  
  [operations/puppet@production] wdqs graph-split: subdomain of 
query.wikidata.org
  
  https://gerrit.wikimedia.org/r/991089

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, gerritbot
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Isabelladantes1983, Themindcoder, Adamm71, Jersione, 
Hellket777, LisafBia6531, Astuthiodit_1, 786, Biggs657, karapayneWMDE, 
Invadibot, maantietaja, Juan90264, Alter-paule, Beast1978, ItamarWMDE, Un1tY, 
Akuckartz, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, 
Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, 
QZanden, EBjune, KimKelting, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Neuronton, Scott_WUaS, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-16 Thread gerritbot 
gerritbot added a comment.


  Change 991088 **merged** by Ryan Kemper:
  
  [operations/puppet@production] wdqs: add exp graph split endpoints to 
alt_names
  
  https://gerrit.wikimedia.org/r/991088

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, gerritbot
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Isabelladantes1983, Themindcoder, Adamm71, Jersione, 
Hellket777, LisafBia6531, Astuthiodit_1, 786, Biggs657, karapayneWMDE, 
Invadibot, maantietaja, Juan90264, Alter-paule, Beast1978, ItamarWMDE, Un1tY, 
Akuckartz, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, 
Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, 
QZanden, EBjune, KimKelting, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Neuronton, Scott_WUaS, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-16 Thread gerritbot 
gerritbot added a project: Patch-For-Review.

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, gerritbot
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Isabelladantes1983, Themindcoder, Adamm71, Jersione, 
Hellket777, LisafBia6531, Astuthiodit_1, 786, Biggs657, karapayneWMDE, 
Invadibot, maantietaja, Juan90264, Alter-paule, Beast1978, ItamarWMDE, Un1tY, 
Akuckartz, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Gaboe420, 
Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, 
QZanden, EBjune, KimKelting, LawExplorer, Lewizho99, Maathavan, _jensen, 
rosalieper, Neuronton, Scott_WUaS, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-16 Thread gerritbot 
gerritbot added a comment.


  Change 991088 had a related patch set uploaded (by Ryan Kemper; author: Ryan 
Kemper):
  
  [operations/puppet@production] wdqs: add exp graph split endpoints to 
alt_names
  
  https://gerrit.wikimedia.org/r/991088

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, gerritbot
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-16 Thread RKemper 
RKemper added a comment.


  Talked with gehel, ebernhardson, and inflatador. We're going to start with 
`full-experimental.wikidata.org`, `main-experimental.wikidata.org`, 
`scholarly-experimental.wikidata.org` to get these 3 test endpoints up. 
Meanwhile, we can open up the convo with the community as far as what the 
ultimate "final" naming/domain scheme will be wrt 
https://phabricator.wikimedia.org/T354043

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-16 Thread RKemper 
RKemper added a comment.


  We did the initial work to get envoy via PKI / cfssl operational in 
https://phabricator.wikimedia.org/T354555#9454855. Next up is adding specific 
alt-names for the three new endpoints. Here's a few different proposals for 
naming scheme:
  
  - `full.query.wikidata.org`, `main.query.wikidata.org`, 
`scholar.query.wikidata.org`
  - `full.wikidata.org`, `main.wikidata.org`, `scholar.wikidata.org`
  - `full-query.wikidata.org`, `main-query.wikidata.org`, and 
`scholarly-query.wikidata.org`
  - `full-query.wikidata.org`, `main-query.wikidata.org`, and 
`scholar.wikidata.org`
  - `full-graph.wikidata.org`, `main-graph.wikidata.org`, and 
`scholar-graph.wikidata.org`
  
  Basically the main uncertainties are: do we want `query` in the domain? If 
so, do we want it to be `X.query.wikidata.org` where X is one of `[full, main, 
scholarly]` or rather `X-query.wikidata.org`?

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-15 Thread Gehel 
Gehel added a subtask: T354043: Decide the name, domain and logo of WDQS for 
scholarly articles.

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, Gehel
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-15 Thread Gehel 
Gehel removed a project: Wikidata-Query-Service.

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, Gehel
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, 
KimKelting, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, 
Mbch331, AWesterinen, Namenlos314, Lucas_Werkmeister_WMDE, merbst, Jonas, 
Xmlizer, jkroll, Jdouglas, Tobias1984, Manybubbles
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-09 Thread BTullis 
BTullis added a comment.


  I wonder whether should look at using the PKI for these certificates, rather 
than `cergen`.
  I can look out some examples of where we have done this elsewhere in the Data 
Engineering infrastrcuture, in case that helps.
  https://wikitech.wikimedia.org/wiki/PKI/Clients

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper, BTullis
Cc: BTullis, Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, 
Danny_Benjafield_WMDE, Astuthiodit_1, AWesterinen, karapayneWMDE, Invadibot, 
maantietaja, ItamarWMDE, Akuckartz, Nandana, Namenlos314, Lahi, Gq86, 
Lucas_Werkmeister_WMDE, GoranSMilovanovic, QZanden, EBjune, KimKelting, merbst, 
LawExplorer, _jensen, rosalieper, Scott_WUaS, Jonas, Xmlizer, jkroll, 
Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org

[Wikidata-bugs] [Maniphest] T354661: Generate TLS certs for new WDQS endpoints

2024-01-09 Thread RKemper 
RKemper created this task.
RKemper added projects: Wikidata, Wikidata-Query-Service, Discovery-Search 
(Current work), Data-Platform-SRE (2023/24 Q3 Milestone 1).

TASK DESCRIPTION
  AC:
  
  - One TLS cert each, generated via cergen, for:
- full-graph
- main-graph
- scholarly-articles

TASK DETAIL
  https://phabricator.wikimedia.org/T354661

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: RKemper
Cc: Aklapper, dr0ptp4kt, dcausse, bking, Gehel, RKemper, Danny_Benjafield_WMDE, 
Astuthiodit_1, AWesterinen, BTullis, karapayneWMDE, Invadibot, maantietaja, 
ItamarWMDE, Akuckartz, Nandana, Namenlos314, Lahi, Gq86, 
Lucas_Werkmeister_WMDE, GoranSMilovanovic, QZanden, EBjune, KimKelting, merbst, 
LawExplorer, _jensen, rosalieper, Scott_WUaS, Jonas, Xmlizer, jkroll, 
Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, Mbch331
___
Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org
To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org