Wikimedia Release Engineering Team/Checkin archive/2023-07-13

= 2023-07-13 =


 * Last time

🏆 Wins & Gratitude

 * https://www.mediawiki.org/wiki/Wikimedia_Release_Engineering_Team/Monthly_notable_accomplishments
 * Jul '23 edition


 * Bunch of GitLab accounts created ~200 accounts
 * Tooling for recurring account syncing
 * Default phabricator.wikimedia.org frontpage has a "I need access or permissions to..." tab panel - https://phabricator.wikimedia.org/W2984


 * Building out a deployment pipeline
 * Good reviews and talented engineers on the team
 * Desiloed
 * Did math!
 * JohnBond upgrading to puppet 7
 * Contint servers upgraded to in-warranty hardware! (Dzahn, John Bond, Jelto)—ssds! zuul-merger should be way faster
 * git::clone puppet resource updated! LDAP group sync stuff
 * Great team + smart people + good reviews
 * ^ +1 + Daniel Zahn, Eoghan, Ahmon's review
 * Meeting yesterday with Dzahn, grateful for him reaching out, having a plan for phab migration stuff
 * Mention of doing a git blame on stacktraces. Experiment in scap was https://gerrit.wikimedia.org/r/c/mediawiki/tools/scap/+/773870

🌻 Open source/Upstream contributions

 * https://www.mediawiki.org/wiki/Wikimedia_Release_Engineering_Team/Upstream

Code review

 * +1'd gerrit changes

Gerrit Access requests

 * Gerrit access requests

GitLab Access requests

 * Accounts and auth -
 * GitLab access requests

📅 Vacations/Important dates

 * https://office.wikimedia.org/wiki/HR_Corner/Holiday_List#2023
 * https://wikitech.wikimedia.org/wiki/Deployments/Yearly_calendar
 * https://www.mediawiki.org/wiki/Wikimedia_Release_Engineering_Team/Time_off

July 2023

 * 03-04 Mon: U.S. July Holiday, US staff with reqs
 * 05 Wed & 06 Thu: Andre CZ public holidays
 * 06 Wed–11 Tue: Dancy out (wedding, not mine)


 * 14 Fri Antoine (Bastille Day, France national holiday)
 * 18 Tue - 21 Fri Jaime
 * 23 Fri Jun–18 Fri Aug: Jeena → Mongolia :D :D
 * 25Tue-28Fri Andre less available (conference)
 * 27 Thr - 28 Fri Dan
 * 28 Fri: Brennen probably out for RockyGrass 🪕
 * 31 Mon Jul – 21 Mon Aug Antoine

August 2023

 * 31 Mon Jul – 21 Mon Aug – Antoine
 * 23 Fri Jun–18 Fri Aug: Jeena → Mongolia :D :D :D
 * 07 Fri: Brennen flying back from NYC
 * 09 Wed: International Day of the World's Indigenous Peoples, US staff with reqs
 * 11 Fri: Brennen out for Folks Fest (?)
 * 7-11 Mon-Fri: Dan out for family vacation
 * 27 Aug–04 Sep: Brennen (🔥)

September 2023

 * 26 Aug–05 Sep: Brennen (🔥)
 * 13 Weds–17 Sun: Brennen → KS (approximate)

🔥🚂 Train

 * https://tools.wmflabs.org/versions/
 * https://train-blockers.toolforge.org/
 * https://wikitech.wikimedia.org/wiki/Deployments/Yearly_calendar


 * 2 Jan - wmf.17 - Dan + Antoine (Jaime out)
 * 9 Jan - wmf.18 - Jeena + Dan (Jaime out)
 * 16 Jan - wmf.19 - Jaime + Jeena
 * 23 Jan - wmf.20 - Brennen + Jaime
 * 30 Jan - wmf.21 - Ahmon + Brennen
 * 6 Feb - wmf.22 - Chad + Ahmon
 * 13 Feb - wmf.23 – Dan + Chad
 * 20 Feb - wmf.24 – Antoine + Dan
 * 27 Feb - wmf.25 – Jaime + Antoine
 * 6 Mar – wmf.26 – Jeena + Jaime
 * 13 Mar – wmf.27 – Brennen + Jeena
 * 20 Mar – wmf.1 – Ahmon + Brennen
 * 27 Mar – wmf.2 – Chad Dan + Ahmon
 * 3 Apr – wmf.3 – Antoine + Dan
 * 10 Apr – wmf.4 – Chad + Antoine
 * 17 Apr – wmf.5 – Jaime + Chad
 * 24 Apr – wmf.6 – Jeena + Jaime
 * 1 May – wmf.7 – Brennen + Jeena
 * 8 May – wmf.8 – Antoine + Brennen (Ahmon out + Antoine Out 8th)
 * 15 May – wmf.9 – Ahmon + Antoine (Dan out + Chad out)
 * 22 May – wmf.10 – Chad + Ahmon (Dan out + Jeena out 26th)
 * 29 May – wmf.11 – Dan + Chad (Memorial Day 29th)
 * 5 Jun – wmf.12 – Jeena + Dan (Brennen out, Jaime out)
 * 12 Jun – wmf.13 – Jaime + Jeena
 * 19 Jun – wmf.15 – Cancelled for offsite
 * 26 Jun – wmf.16 – Brennen + Jaime (Jeena out)
 * 3 Jul – wmf.17 – Antoine + Brennen (3rd + 4th holidays)


 * 10 Jul – wmf.18 – Dan + Antoine (Ahmon out)
 * 17 Jul – wmf.19 – Ahmon+Dan (Brennen out Friday)
 * 24 Jul – wmf.20 – Jaime+Ahmon

Team discussions
How do I even Jenkins Security? 1. Email from Jenkins 2. Filing a task 3. Updating Jenkins
 * Integration-ci
 * go to manage plugins
 * check now for plugins
 * download and install after restart
 * ssh in and run systemctl restart jenkins
 * releases jenkins
 * https://gitlab.wikimedia.org/repos/releng/jenkins-deploy
 * Update: https://gitlab.wikimedia.org/repos/releng/jenkins-deploy/-/blob/master/conf/releasing/plugins.txt
 * Apply in scap3 dev env and run groovy in the script console
 * After scap3 deploy: secondary host needs to be disable post-deploy
 * Copy and paste output from script console
 * Run deploy.sh from jenkins-deploy

Followup stuff:
 * step-by-step on https://wikitech.wikimedia.org/wiki/Jenkins#Security_updates for filing the task
 * We need a working scap3-dev environment to do this
 * Maybe we could have a shared environment to do this somewhere?
 * releases-jenkins as container?
 * Tricky without volume storage
 * Maybe run as a container on the host (needs seperate docker daemon)

Talk with performance team about all the things we own, now? Interested?
 * Yes

Move Phab to Phorge
 * Spinning up phab-specific sync
 * Brennen, Andre, Jamie, Ahmon
 * Opposite Collab sync
 * Every other week
 * Calendar Jenga needed (Thcipriani)

PipelineLib → GitLab
 * Meeting next week with Collab to talk about permissions, whose in? dancy