Log In
Project-requests
Cloud-VPS (Project-requests)
Milestone
ActivePublic
Members (8)
Devnull (Devnull)
Security
AndyTan (AndyTan)
User
scfc (Tim Landscheidt)
User
jeremyb
User
Krenair (Alex Monk)
Wikimedia volunteer
Luke081515 (Luke)
German arbcom member
Andrew (Andrew Bogott)
User
View All
Watchers (9)
dcaro (David Caro)
SRE & amauteur yak shaver
maher (Maher Fawzy samy)
User
Jony (ZI Jony)
Volunteer Support
Fheredia
User
AndyTan (AndyTan)
User
sietec (sietecFAST™ sysAdmin)
User
Bsandipan (Sandipan)
User
Krenair (Alex Monk)
Wikimedia volunteer
bd808 (Bryan Davis)
Principal Software Engineer, Technical Engagement
View All
Details
DESCRIPTION
Requests for creating or deleting Cloud-VPS projects. See openstack-browser for a list of existing projects and their members. For quota changes see Cloud-VPS (Quota-requests)
Before you request a project
Confirm you cannot run your code/bot/thing on Toolforge. You can request access to Toolforge by following the instructions on wikitech. With Toolforge, the underlying infrastructure will be taken care of for you, and you can focus on writing your tool / bot / researchy-thing.
Only request a VPS project if you need root on the VM for a specific purpose (or need testing VMs for MediaWiki changes, etc). Remember that if you have root you have responsibilities too! :)
Accept responsibility for the VMs that are created. Puppet needs to be kept in working order to be compatible with the rest of the Cloud Services ecosystem. Updates will need to be applied periodically.
Project scope
Cloud VPS projects should be scoped based around concrete products or software projects, rather than the team working on them. The three main problems that we (the Cloud Services team) have seen in the past with team ownership/scope for Cloud VPS projects are:
There are things that can be done to mitigate these problems, but the easiest thing to do is to create more targeted projects that are scoped to a product/project rather than a team. This can become a burden in other ways if a common group of developers is active on a large number of such projects, so we are willing to be flexible if good cause can be shown for project consolidation.
For more guidance, see https://wikitech.wikimedia.org/wiki/Help:Cloud_VPS_project
Requesting a new project
To request a new project, create a task using this link, and fill out the requested information by <replacing the instructions>
Process
Requests are processed by the Cloud Services team during the Cloud Services team meeting every Wednesday (8:00 PST) that the meeting is held. This schedule may be effected by holidays, conferences, or other unavailability. Requests can be granted when approved by a quorum of at least two WMCS team members.
Once approved (typically noted with a "+1" or "approved" comment on the task), creation of the project in OpenStack will be handled by a member of the Cloud VPS admin team. This will typically happen within 1-2 days, but may take longer due to availability of computing resources or higher priority administration tasks.
See also
Cloud-VPS (Quota-requests)
Recent Activity
Wed, Jun 16
Ladsgroup added a comment to T279870: Request creation of masz VPS project.
I have pinged them for five times now.
Wed, Jun 16, 6:54 AM · Anti-Harassment, Cloud-VPS (Project-requests)
JJMC89 closed T285026: Request creation of <PROJECT-NAME> VPS project as Invalid.
Wed, Jun 16, 1:57 AM · Cloud-VPS (Project-requests)
Mohammed_AbuKhadra created T285026: Request creation of <PROJECT-NAME> VPS project.
Wed, Jun 16, 1:44 AM · Cloud-VPS (Project-requests)
Tue, Jun 15
nskaggs added a comment to T279870: Request creation of masz VPS project.
Any updates on this? Confirmation from Legal?
Tue, Jun 15, 4:55 PM · Anti-Harassment, Cloud-VPS (Project-requests)
Mon, Jun 7
EpicPupper added a comment to T283791: Request creation of ircwebchat VPS project.
Funny, was going to create a request for the same purpose, but searched and saw this :)
Mon, Jun 7, 6:34 PM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Sun, May 30
Gryllida added a comment to T283791: Request creation of ircwebchat VPS project.
yes, it works now; thanks Andrew
Sun, May 30, 3:01 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Sat, May 29
Andrew added a comment to T283791: Request creation of ircwebchat VPS project.
In T283791#7122711, @Gryllida wrote:
Hi @Andrew thank you. I now have set up 2FA, and logged in to horizon, but ircwebchat is not listed (only bastion and tools); is it the correct place to get started? How do I have access?
Sat, May 29, 5:10 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Gryllida added a comment to T283791: Request creation of ircwebchat VPS project.
Hi @Andrew thank you. I now have set up 2FA, and logged in to horizon, but ircwebchat is not listed (only bastion and tools); is it the correct place to get started? How do I have access?
Sat, May 29, 1:59 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Thu, May 27
Andrew closed T283791: Request creation of ircwebchat VPS project as Resolved.
This should be ready to go. There's on floating IP allocated to the project, and I've also added xff exception for the ircwebchat.wmcloud.org domain -- if you want to use a different proxy name we'll need to adjust for that.
Thu, May 27, 6:27 PM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Bstorm added a comment to T283791: Request creation of ircwebchat VPS project.
+1
Thu, May 27, 6:12 PM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Majavah updated the task description for T283791: Request creation of ircwebchat VPS project.
Thu, May 27, 5:24 PM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Majavah added a project to T283791: Request creation of ircwebchat VPS project: wikimedia-irc-libera.
Thu, May 27, 5:35 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
bd808 added a comment to T283791: Request creation of ircwebchat VPS project.
In T283791#7118322, @bd808 wrote:
+1. This should also have either an IP passthrough exception for the wmcloud.org proxy (so the client IP can be passed to Libera.Chat via WEBIRC) or a floating IP. With a floating IP it will need to handle it's own TLS certs too, but would separate traffic from the shared NAT which might prevent accidental k-lines of all of Cloud VPS + Toolforge.
Thu, May 27, 5:21 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Legoktm renamed T283791: Request creation of ircwebchat VPS project from Request creation of ircwebchat-wm VPS project to Request creation of ircwebchat VPS project.
Thu, May 27, 5:19 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
bd808 added a comment to T283791: Request creation of ircwebchat VPS project.
+1. This should also have either an IP passthrough exception for the wmcloud.org proxy (so the client IP can be passed to Libera.Chat via WEBIRC) or a floating IP. With a floating IP it will need to handle it's own TLS certs too, but would separate traffic from the shared NAT which might prevent accidental k-lines of all of Cloud VPS + Toolforge.
Thu, May 27, 5:19 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Legoktm added a comment to T283791: Request creation of ircwebchat VPS project.
While Libera Chat is planning to set up their own webchat, @Gryllida has rightly pointed out that we could provide a much better experience if we tailored the web chat specifically at helping new people on Wikimedia channels and potentially other tweaks. I'm volunteering to assist with the Cloud VPS specific parts like policies and various integrations. This service will need to see the real IP of users, and as such will need to live in Cloud VPS. It's likely we will also need a floating IP as well.
Thu, May 27, 5:18 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Gryllida updated the task description for T283791: Request creation of ircwebchat VPS project.
Thu, May 27, 5:09 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
Gryllida created T283791: Request creation of ircwebchat VPS project.
Thu, May 27, 5:07 AM · wikimedia-irc-libera, Cloud-VPS (Project-requests)
May 20 2021
aborrero closed T281600: Request creation of wikinewsie VPS project as Resolved.
Please open a quota request later for the floating IP if you need it.
May 20 2021, 9:04 AM · Cloud-VPS (Project-requests)
Stashbot added a comment to T281600: Request creation of wikinewsie VPS project.
Mentioned in SAL (#wikimedia-cloud) [2021-05-20T09:04:15Z] <arturo> created project (T281600)
May 20 2021, 9:04 AM · Cloud-VPS (Project-requests)
May 19 2021
Leaderboard added a comment to T281600: Request creation of wikinewsie VPS project.
In T281600#7099050, @Acagastya wrote:
@Leaderboard we can't have the mailserver there. So we can really drop that part of the request.
May 19 2021, 5:58 PM · Cloud-VPS (Project-requests)
Acagastya added a comment to T281600: Request creation of wikinewsie VPS project.
@Leaderboard we can't have the mailserver there. So we can really drop that part of the request.
May 19 2021, 5:57 PM · Cloud-VPS (Project-requests)
Leaderboard added a comment to T281600: Request creation of wikinewsie VPS project.
In T281600#7095826, @Bstorm wrote:
Just wanted to make sure you still wanted/needed it.
May 19 2021, 5:38 PM · Cloud-VPS (Project-requests)
jcrespo added a comment to T283059: Request creation of dbbackups-dashboard VPS project.
Thank you very much for the fast response. It works great!
May 19 2021, 9:18 AM · cloud-services-team (Kanban), Cloud-VPS (Project-requests)
Bstorm closed T283059: Request creation of dbbackups-dashboard VPS project as Resolved.
Project is all set with default quotas.
May 19 2021, 12:27 AM · cloud-services-team (Kanban), Cloud-VPS (Project-requests)
May 18 2021
Bstorm added a comment to T281600: Request creation of wikinewsie VPS project.
Just wanted to make sure you still wanted/needed it.
May 18 2021, 3:04 PM · Cloud-VPS (Project-requests)
jcrespo updated the task description for T283059: Request creation of dbbackups-dashboard VPS project.
May 18 2021, 9:10 AM · cloud-services-team (Kanban), Cloud-VPS (Project-requests)
aborrero moved T283059: Request creation of dbbackups-dashboard VPS project from Inbox to Clinic Duty on the cloud-services-team (Kanban) board.
May 18 2021, 9:05 AM · cloud-services-team (Kanban), Cloud-VPS (Project-requests)
aborrero assigned T283059: Request creation of dbbackups-dashboard VPS project to Bstorm.
looks good to me, +1
May 18 2021, 9:04 AM · cloud-services-team (Kanban), Cloud-VPS (Project-requests)
jcrespo created T283059: Request creation of dbbackups-dashboard VPS project.
May 18 2021, 8:31 AM · cloud-services-team (Kanban), Cloud-VPS (Project-requests)
Leaderboard added a comment to T281600: Request creation of wikinewsie VPS project.
In T281600#7094315, @Bstorm wrote:
Ok, I think we can create the project so you can create some VMs. What was the verdict on the floating IP? I'm a bit lost on that.
May 18 2021, 8:01 AM · Cloud-VPS (Project-requests)
May 17 2021
Bstorm added a comment to T281600: Request creation of wikinewsie VPS project.
Ok, I think we can create the project so you can create some VMs. What was the verdict on the floating IP? I'm a bit lost on that.
May 17 2021, 10:34 PM · Cloud-VPS (Project-requests)
May 13 2021
Leaderboard added a comment to T281600: Request creation of wikinewsie VPS project.
In T281600#7086223, @Bstorm wrote:
In T281600#7086207, @bd808 wrote:
No. Using Cloud VPS as a proxy to access geo-blocked content is not an acceptable use.
+1 This is not a grey area. It is simply not an acceptable use.
May 13 2021, 7:58 PM · Cloud-VPS (Project-requests)
Bstorm added a comment to T281600: Request creation of wikinewsie VPS project.
In T281600#7086207, @bd808 wrote:
No. Using Cloud VPS as a proxy to access geo-blocked content is not an acceptable use.
May 13 2021, 7:32 PM · Cloud-VPS (Project-requests)
bd808 added a comment to T281600: Request creation of wikinewsie VPS project.
In T281600#7085907, @Acagastya wrote:
To clarify, right now multiple people have been writing news about events in the US -- citing various government websites. I am not sure if the problem exists if they are geoblocking the content, or my ISP is blocking, and I have been relying on PornHub's VPN for proxying from the US. I understand the current rules prohibit using WMCS to be used as a proxy, but given this circumstance, would it be okay to set up wireguard on the VPS? The use is minimal, and for the purpose of wiki only, to access otherwise geo-restricted info for the purpose of verification.
May 13 2021, 7:27 PM · Cloud-VPS (Project-requests)
Acagastya added a comment to T281600: Request creation of wikinewsie VPS project.
To clarify, right now multiple people have been writing news about events in the US -- citing various government websites. I am not sure if the problem exists if they are geoblocking the content, or my ISP is blocking, and I have been relying on PornHub's VPN for proxying from the US. I understand the current rules prohibit using WMCS to be used as a proxy, but given this circumstance, would it be okay to set up wireguard on the VPS? The use is minimal, and for the purpose of wiki only, to access otherwise geo-restricted info for the purpose of verification.
May 13 2021, 6:02 PM · Cloud-VPS (Project-requests)
Leaderboard added a comment to T281600: Request creation of wikinewsie VPS project.
In T281600#7085517, @Bstorm wrote:
By "infrastructure" I mean a blank virtual computer, per @Leaderboard 's comments. You have to build a database, web server, etc. and keep them safe.
May 13 2021, 4:51 PM · Cloud-VPS (Project-requests)
Bstorm added a comment to T281600: Request creation of wikinewsie VPS project.
By "infrastructure" I mean a blank virtual computer, per @Leaderboard 's comments. You have to build a database, web server, etc. and keep them safe.
May 13 2021, 4:06 PM · Cloud-VPS (Project-requests)
Bstorm added a comment to T281600: Request creation of wikinewsie VPS project.
Fair. I'm saying it could be pretty secure if you make it so. Putting it in Cloud VPS is replacing the Wikimedia SRE, network and security teams with yourselves. Cloud Services provides an infrastructure, and we try to make it good. From there, you have to ensure the wiki's security through best practices. That's what I mean.
May 13 2021, 4:05 PM · Cloud-VPS (Project-requests)
Leaderboard added a comment to T281600: Request creation of wikinewsie VPS project.
In T281600#7084372, @Acagastya wrote:
Re guarantees, are you referring to loss of data, or backups, or storage failures?
May 13 2021, 8:40 AM · Cloud-VPS (Project-requests)
Aklapper added a comment to T281600: Request creation of wikinewsie VPS project.
KMS would be a cryptographic key management system
May 13 2021, 8:24 AM · Cloud-VPS (Project-requests)
Acagastya added a comment to T281600: Request creation of wikinewsie VPS project.
I do not use AWS, so I would not know what KMS is supposed to be doing. Could you please answer about this, @Bstorm?
May 13 2021, 5:47 AM · Cloud-VPS (Project-requests)
Ladsgroup added a comment to T279870: Request creation of masz VPS project.
I sent them an email a while ago. I ping them again.
May 13 2021, 3:02 AM · Anti-Harassment, Cloud-VPS (Project-requests)
May 12 2021
bd808 changed the status of T279870: Request creation of masz VPS project from Open to Stalled.
Stalled pending confirmation of approval by WMF-Legal
May 12 2021, 7:47 PM · Anti-Harassment, Cloud-VPS (Project-requests)
Bstorm added a comment to T281600: Request creation of wikinewsie VPS project.
I'm talking about the password of your database server, mediawiki admin, etc. You cannot disable root, etc. as that is controlled by WMCS via puppet, and keeping puppet running is generally required. There are no ssh passwords (VMs are key only). I'm talking about what you use to design your services. All we provide is VMs. I was suggesting that you would probably want to be careful with that data. We don't have a KMS-type service like AWS and similar systems do.
May 12 2021, 6:44 PM · Cloud-VPS (Project-requests)
Acagastya added a comment to T281600: Request creation of wikinewsie VPS project.
@Bstorm, I still do not understand why the discussion is about passwords -- are you talking about VPS root password? (Couldn't we disable root login and password-based login in favour of SSH?) Or is it about something else?
May 12 2021, 6:21 PM · Cloud-VPS (Project-requests)
Bstorm added a comment to T281600: Request creation of wikinewsie VPS project.
I'm saying that we don't provide a secure place to share passwords for servers, and we have one for puppet, but it involves setting up a plain text single-point of failure puppet server in your project https://wikitech.wikimedia.org/wiki/Help:Standalone_puppetmaster​. That's what I'm referring to.
May 12 2021, 5:35 PM · Cloud-VPS (Project-requests)
Acagastya added a comment to T281600: Request creation of wikinewsie VPS project.
@Bstorm, could you please explain "Our secrets management in Cloud VPS is somewhat rudimentary and you may want to provide your own better way of storing things like passwords (like password managers, etc) especially if you have data you care about"?
May 12 2021, 5:27 PM · Cloud-VPS (Project-requests)
Bstorm added a comment to T281600: Request creation of wikinewsie VPS project.
Some of the technical security concerns in WMCS are historical and have since been fixed. I have an easier time sniffing network packets on a real LAN than I do on the same hypervisor on Cloud VPS at this point, to speak to some of what I think @Chicocvenancio is hinting at.
May 12 2021, 5:02 PM · Cloud-VPS (Project-requests)
Andrew assigned T281600: Request creation of wikinewsie VPS project to Bstorm.
May 12 2021, 3:44 PM · Cloud-VPS (Project-requests)
Content licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted; code licensed under GNU General Public License (GPL) or other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL