[09:36:28] 10netbox, 10Infrastructure-Foundations: Netbox: define strategy to track standard server configurations - https://phabricator.wikimedia.org/T284614 (10Volans) We did have a meeting yesterday with @wiki_willy and @cmooney and here's the summary of it for context (please correct me if I mis-represented anything)... [11:50:21] would it possible to use cas for developer account authentication for a service that runs in wmcs? my use case is T285055 [11:50:21] T285055: Allow project members/admins to ack/silence alerts of that project - https://phabricator.wikimedia.org/T285055 [11:52:22] not at the moment, the IDP installation in cloud VPS runs a local LDAP backend instead of the main LDAP databse [11:54:37] hmm [12:10:36] are there plans on supporting cas logins outside prod in the future? if yes, anything I can do to make it possible faster? [12:36:44] I'm not aware of a current plan for this, but this would require some planning/coordination with the WMCS folks. maybe file a Phab task so that this can be discussed/prioritised further? [12:37:17] there are some restrictions on Cloud VPS instances operating on LDAP data, but I'm not sure if those also apply to services running in cloud-infra [12:38:19] is there anything blocking usage of the production cas installation from cloud vps, instead of settign up a separate cas installation in cloud for this? [12:45:43] yeah, we're trying to minimise overlap of production and Cloud VPS for all new services [12:46:00] cloud VPS is essentially the whole internet since it's easy to create a VM [12:46:18] and as such, this widens the attack surface significantly [12:46:50] also, these services might want to operate at a different pace [12:47:08] e.g. the Cloud IDP could enable options which are not needed/too risky for production [12:58:10] 10CAS-SSO, 10Cloud-Services, 10Infrastructure-Foundations, 10LDAP: Create solution for developer account authentication for services hosted in Cloud VPS - https://phabricator.wikimedia.org/T286716 (10Majavah) [12:58:11] filed T286716, thanks [12:58:11] T286716: Create solution for developer account authentication for services hosted in Cloud VPS - https://phabricator.wikimedia.org/T286716 [13:04:06] 10CAS-SSO, 10Cloud-Services, 10Infrastructure-Foundations, 10LDAP: Create solution for developer account authentication for services hosted in Cloud VPS - https://phabricator.wikimedia.org/T286716 (10Majavah) [13:05:41] thx [13:52:04] 10CAS-SSO, 10Cloud-Services, 10Infrastructure-Foundations, 10LDAP, 10User-MoritzMuehlenhoff: Create solution for developer account authentication for services hosted in Cloud VPS - https://phabricator.wikimedia.org/T286716 (10MoritzMuehlenhoff) [19:26:20] 10CAS-SSO, 10Cloud-Services, 10Infrastructure-Foundations, 10LDAP, 10User-MoritzMuehlenhoff: Create solution for developer account authentication for services hosted in Cloud VPS - https://phabricator.wikimedia.org/T286716 (10Majavah)