On 24 March 2016 at 11:11, Marko Obrovac <[email protected]> wrote:
> Hello, > > On 23 March 2016 at 23:44, Andrew Bogott <[email protected]> wrote: > >> == Executive Summary == >> >> Creation of new web proxies and DNS records will be disabled over the >> weekend; Labs and Tools will switch to a new public DNS system on Monday, >> with possible accompanying hiccups and interruptions. >> >> Nothing will change for ToolLabs users, and no immediate action is >> required on the part of tool or project maintainers. Starting Monday, >> however, Labs project maintainers will need to use the Horizon[1] web UI to >> manage proxies, manage public DNS records, and assign floating IPs to >> instances. >> >> Labs Project Admins: Two-factor authentication will be required to >> access the new Horizon interface. Please set up 2fa now (via Preferences-> >> User Profile on Wikitech) so that you aren't rudely surprised when trying >> to manage Horizon during future emergencies. >> > > I've set up 2FA successfully and I can now log in to horizon.wikimedia.org, > but I can't log in any more on wikitech :/ Neither my password nor the > provided 6-code digit work. Whatever I type in there I'm getting "The > two-factor authentication token provided was invalid.". Is this a known > issue? Or am I doing something wrong? > Euh, nevermind. That was me being ignorant. It's not entering either of the two, I needed to put in both my password **and** the token :P Life's good again. > > Cheers, > Marko > > >> >> == The whole story == >> >> Currently the public DNS server that resolves things under wmflabs.org >> is running an old and creaky setup using ldap and powerdns. These domains >> are configured using WMF-developed features on wikitech. Labs internal dns >> (e.g. foo.bar.eqiad.wmflabs) is now managed by the OpenStack Designate >> project with a more modern mysql-based powerdns backend. >> >> There's a ready-made upstream web UI for designate[2] that is part of the >> Horizon project. So, we're going to standardize on Designate, Horizon, and >> mysql/powerdns, and rip out the old ldap/pdns/wikitech code[3]. Web proxy >> management is intimately linked with dns management, so the proxy UI will >> also move to Horizon, thanks to a custom Horizon panel written by Alex Monk. >> >> Timeline: >> >> This week: Various web Domain and Proxy UIs will appear and disappear >> from horizon.wikimedia.org as we put the finishing touches on the new >> interface. Changes made via these interfaces will have no effect on public >> DNS before Monday; on Monday some such changes may persist and some may be >> overwritten. >> >> Friday, 2015-03-27: A few sidebar links on wikitech will vanish: " >> Manage Addresses," and " Manage Web Proxies." During the following days, >> public DNS will be effectively frozen so that we have time to safely >> migrate to the new setup. >> >> Friday (and, possibly, weekend): DNS migration to designate, testing >> >> Monday, 2015-03-30, 18:00 UTC: The public dns servers labs-ns0 and >> labs-ns1 will be moved to point to the new DNS service. There may be brief >> interruptions to public DNS during the switch-over. The Horizon web UI for >> domains and proxies will be live and available to all project admins. >> >> >> >> [1] https://wikitech.wikimedia.org/wiki/Help:Horizon_FAQ >> [2] https://github.com/openstack/designate-dashboard >> [3] https://phabricator.wikimedia.org/T124184 >> >> _______________________________________________ >> Labs-announce mailing list >> [email protected] >> https://lists.wikimedia.org/mailman/listinfo/labs-announce >> >> _______________________________________________ >> Labs-l mailing list >> [email protected] >> https://lists.wikimedia.org/mailman/listinfo/labs-l >> >> > > > -- > Marko Obrovac, PhD > Senior Services Engineer > Wikimedia Foundation > -- Marko Obrovac, PhD Senior Services Engineer Wikimedia Foundation
_______________________________________________ Labs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/labs-l
