Ladsgroup added a comment.

  I just wanted to say while I love to get this into production, I highly 
object to get the code in production while trying to read the cloud service in 
the backend (i.e. deploying the code without deploying the service to 
production). We tried to do this for ores several years ago and it turned out 
that it is not a good idea.
  
  - The reason production doesn't speak to the outside is security, we are 
exposing a big vector attack. That service can be taken over somewhat easier.
  - The defense in depth principle being applied in production implies anything 
we depend on must have a security review. This effectively bypasses that 
principle.
  - Production and Cloud have way different SLOs. The service can go down for 
any reason for hours or more, degrading a production functionality or worse 
causing exceptions and possibly an outage in production.

TASK DETAIL
  https://phabricator.wikimedia.org/T284820

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Ladsgroup
Cc: Ladsgroup, Esc3300, Aklapper, Lydia_Pintscher, Addshore, Invadibot, 
maantietaja, Akuckartz, Iflorez, alaa_wmde, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Scott_WUaS, 
Jonas, Wikidata-bugs, aude, Sjoerddebruin, Mbch331
_______________________________________________
Wikidata-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to