Scrum of scrums/2015-03-04

Facilitating: Grace Gellerman

Apps

• https://phabricator.wikimedia.org/T90228 ("Investigate building a Node.js service for mobile apps content") is coming along nicely (update at https://lists.wikimedia.org/pipermail/mobile-l/2015-March/008695.html). https://phabricator.wikimedia.org/T87824 ("Create specialised content API for mobile apps ") looks like it will be an achievable task with this preliminary work.
• https://phabricator.wikimedia.org/T90606 Avoid cache fragmenting URLs for Share a Fact shares: Adam B pinged on IRC last week, just pinged on Phabricator ticket, also emailed analytics list about a shorter, non-colliding parameter name "wmfxan".

Multimedia

• Sentry review for tgr - https://phabricator.wikimedia.org/T84956 https://phabricator.wikimedia.org/T85262
• Burndown charts in Phabricator - do they work for you? - https://phabricator.wikimedia.org/project/sprint/burn/1073/

Services

• RESTBase
  • Prod v0 ticket: https://phabricator.wikimedia.org/T89481
  • live, hit some issues with Cassandra, which are being addressed now - https://phabricator.wikimedia.org/T89066
  • still waiting on one machine - https://phabricator.wikimedia.org/T89639
  • about to enable it to serve test wikis && WPs - https://gerrit.wikimedia.org/r/#/c/194244/
• Mobile Apps
  • working on their service prototype and a service template for Node.js
• VE
  • our team focused on getting RESTBase in VRS - https://phabricator.wikimedia.org/T89066
    • MW core patch: https://gerrit.wikimedia.org/r/#/c/193826/
    • VE-ext patch: https://gerrit.wikimedia.org/r/#/c/194338/
• Graphoid
  • code is ready, Puppet modules and deployment missing - https://phabricator.wikimedia.org/T90487
• Citoid
  • some code rework done (improvements, clean-up, tests)
  • still some issues to resolve
  • depends on the Zotero service which is not working properly (blocked on Ops) - https://phabricator.wikimedia.org/T76308

Language

• Some languages missing from our dashboard - Dan is already aware
• Translate's page translation has gone extra wonky on production - no longer possible to mark some page for translation. I am out of ideas what could be going wrong, so I'd appreciate any help to debug the issue. https://phabricator.wikimedia.org/T90704
• We tested the parsoid ref change - it seems some work needed from our side

Security

• Still working on T78730 (Manually verify whitelisted.yaml / graylisted.yaml to ensure completeness)
• Hopefully facebook will fix T85848
• Hiring

Parsoid

• No blockers on anything.
• Deployed DOM spec change for <ref> tags on Monday and everything still good in VE land as expected.
• Nothing more notable to report - continue to fixing VE Q3 blocker bugs and deploying them.

MediaWiki Core

• AuthManager RfC out of draft and ready for review (review today on irc)
• Work on utfnormal library continuing with help from Brion
• Preparing data and scripts so that SUL account name change notifications can be sent
• BlazeGraph announced to ops-l as WDQv2 backend choice pending some final verifications
• Ori worked with both Sean and Ops on EventLogging maintenance work (db master change and new nodes provisioned)
• Ori deployed HTTPS capability test

Fundraising Tech

• Usual fr-stuff (deployed CN patch to reduce RecordImpression requests by 2/3!)
• Got results of PCI compliance review: https://collab.wikimedia.org/wiki/Fundraising/Engineering/PCI_Gap_Assessment_Feb_2015
  • Impact is almost entirely limited to the fundraising team
  • Stuff to do: https://phabricator.wikimedia.org/T77912
  • Info in scope is only credit card number, expiration date and CVN
  • Machines in scope are just the payments cluster and dev machines of people that can deploy there
  • We will need some help from the security team to do or recommend contractors for (private phab tasks)
    • Annual internal scan: https://phabricator.wikimedia.org/T91448
    • Annual penetration testing: https://phabricator.wikimedia.org/T91447
    • Annual code review *or* web application firewall: https://phabricator.wikimedia.org/T91449
    • Regular security training for fr-tech: https://phabricator.wikimedia.org/T91451

Release Engineering

* no blockers currently
* staging cluster with uptime metrics in progress
* figuring out tarball releases
* ongoing work on disposible VMs for CI (slated for July)
* researching per-team browser test dashboard

Editing

• Roan in Europe this week and next week
• Breaking change release of OOjs UI later today or tomorrow

• Breaking what?

• Parsoid reference change was deployed on Monday, exposed a bug but we fixed it quickly