GitLab SSH is moving to gitlab-ssh.wikimedia.org

--===============1095152843515206967==
Content-Type: multipart/alternative; boundary="000000000000f691f90654d3109d"

--000000000000f691f90654d3109d
Content-Type: text/plain; charset="UTF-8"

Hi all,

Heads up: as part of putting GitLab behind a CDN (T425441
<https://phabricator.wikimedia.org/T425441>), SSH access for git commands
is moving to a dedicated hostname: gitlab-ssh.wikimedia.org. This only
affects SSH git access. HTTPS clones are unaffected.


   - The new hostname is available now.
   - Starting tomorrow (June 23rd) morning, GitLab will advertise it
   <https://gerrit.wikimedia.org/r/c/operations/puppet/+/1300763> on new
   git clone commands, so new clones will use it automatically.
   - gitlab.wikimedia.org will stay reachable over SSH for git commands
   until GitLab moves behind the CDN. We'll announce the change before it
   happens. After that, gitlab.wikimedia.org will no longer be reachable
   via SSH.

The quickest way to switch remotes all at once would be:

git config --global url."[email protected]:".insteadOf "
[email protected]:"

Per-repo rewrites, CI jobs and ~/.ssh/config are covered in the migration
guide <https://wikitech.wikimedia.org/wiki/GitLab/Migration>. wmf-laptop
<https://wikitech.wikimedia.org/wiki/Wmf-laptop> has been updated, so
wmf-update-known-hosts-production and wmf-update-ssh-config will reflect
the change.
Questions and feedback welcome on the task
<https://phabricator.wikimedia.org/T425441>.

Thanks!
--
*Arnaud Bran* (he/him)
Senior Site Reliability Engineer
Wikimedia Foundation <https://wikimediafoundation.org/>

--000000000000f691f90654d3109d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div class=3D"gmail-[content-visibility:a=
uto] gmail-[contain-intrinsic-size:auto_400px] gmail-px-2 gmail--mx-2 gmail=
-pb-8 gmail--mb-8 gmail-print:[content-visibility:visible]"><div><div class=
=3D"gmail-contents"><div class=3D"gmail-mb-1 gmail-mt-6 gmail-group"><div c=
lass=3D"gmail-flex gmail-flex-col gmail-items-end gmail-gap-1"><div class=
=3D"gmail-flex gmail-justify-start gmail-opacity-0 gmail-group-hover:opacit=
y-100 gmail-group-focus-within:opacity-100 gmail-pointer-coarse:opacity-100=
 gmail-transition" role=3D"group" aria-label=3D"Message actions"><div class=
=3D"gmail-text-text-300"><div class=3D"gmail-text-text-300 gmail-flex gmail=
-items-stretch gmail-justify-between"><div class=3D"gmail-flex gmail-items-=
center"></div></div></div></div></div></div></div></div></div><div><div><di=
v class=3D"gmail-group" style=3D"height:auto;opacity:1"><div class=3D"gmail=
-contents"><div class=3D"gmail-group gmail-relative gmail-relative gmail-pb=
-3" style=3D"opacity:1"><div class=3D"gmail-font-claude-response gmail-rela=
tive gmail-leading-[1.65rem] gmail-[&amp;_pre&gt;div]:bg-bg-000/50 gmail-[&=
amp;_pre&gt;div]:border-0.5 gmail-[&amp;_pre&gt;div]:border-border-400 gmai=
l-[&amp;_.ignore-pre-bg&gt;div]:bg-transparent gmail-[&amp;_.standard-markd=
own_:is(p,blockquote,h1,h2,h3,h4,h5,h6)]:pl-2 gmail-[&amp;_.standard-markdo=
wn_:is(p,blockquote,ul,ol,h1,h2,h3,h4,h5,h6)]:pr-8 gmail-[&amp;_.progressiv=
e-markdown_:is(p,blockquote,h1,h2,h3,h4,h5,h6)]:pl-2 gmail-[&amp;_.progress=
ive-markdown_:is(p,blockquote,ul,ol,h1,h2,h3,h4,h5,h6)]:pr-8"><div><div cla=
ss=3D"gmail-grid gmail-grid-rows-[auto_auto] gmail-min-w-0"><div class=3D"g=
mail-row-start-2 gmail-col-start-1 gmail-relative gmail-grid gmail-isolate =
gmail-min-w-0"><div class=3D"gmail-row-start-1 gmail-col-start-1 gmail-rela=
tive gmail-z-[2] gmail-min-w-0"><div><div class=3D"gmail-standard-markdown =
gmail-grid-cols-1 gmail-grid gmail-[&amp;_&gt;_*]:min-w-0 gmail-gap-3 gmail=
-standard-markdown"><p class=3D"gmail-font-claude-response-body gmail-break=
-words gmail-whitespace-normal">Hi all,</p>
<p class=3D"gmail-font-claude-response-body gmail-break-words gmail-whitesp=
ace-normal">Heads up: as part of putting GitLab behind a CDN (<a class=3D"g=
mail-underline gmail-underline gmail-underline-offset-2 gmail-decoration-1 =
gmail-decoration-current/40 gmail-hover:decoration-current gmail-focus:deco=
ration-current" href=3D"https://phabricator.wikimedia.org/T425441">T425441<=
/a>), SSH access for git commands is moving to a dedicated hostname: <a hre=
f=3D"http://gitlab-ssh.wikimedia.org">gitlab-ssh.wikimedia.org</a>. This on=
ly affects SSH git access. HTTPS clones are unaffected.</p>
<p class=3D"gmail-font-claude-response-body gmail-break-words gmail-whitesp=
ace-normal"></p>
<ul class=3D"gmail-[li_&amp;]:mb-0 gmail-[li_&amp;]:mt-1 gmail-[li_&amp;]:g=
ap-1 gmail-[&amp;:not(:last-child)_ul]:pb-1 gmail-[&amp;:not(:last-child)_o=
l]:pb-1 gmail-list-disc gmail-flex gmail-flex-col gmail-gap-1 gmail-pl-8 gm=
ail-mb-3"><li class=3D"gmail-font-claude-response-body gmail-whitespace-nor=
mal gmail-break-words gmail-pl-2">The new hostname is available now.</li><l=
i class=3D"gmail-font-claude-response-body gmail-whitespace-normal gmail-br=
eak-words gmail-pl-2">Starting tomorrow (June 23rd) morning, GitLab <a clas=
s=3D"gmail-underline gmail-underline gmail-underline-offset-2 gmail-decorat=
ion-1 gmail-decoration-current/40 gmail-hover:decoration-current gmail-focu=
s:decoration-current" href=3D"https://gerrit.wikimedia.org/r/c/operations/p=
uppet/+/1300763">will advertise it</a> on new git clone commands, so new cl=
ones will use it automatically.</li><li class=3D"gmail-font-claude-response=
-body gmail-whitespace-normal gmail-break-words gmail-pl-2"><a href=3D"http=
://gitlab.wikimedia.org">gitlab.wikimedia.org</a> will stay reachable over =
SSH for git commands until GitLab moves behind the CDN. We&#39;ll announce =
the change before it happens. After that, <a href=3D"http://gitlab.wikimedi=
a.org">gitlab.wikimedia.org</a> will no longer be reachable via SSH.</li></=
ul>
<p class=3D"gmail-font-claude-response-body gmail-break-words gmail-whitesp=
ace-normal">The quickest way to switch remotes all at once would be:</p>
<p class=3D"gmail-font-claude-response-body gmail-break-words gmail-whitesp=
ace-normal"><code class=3D"gmail-bg-text-200/5 gmail-border gmail-border-0.=
5 gmail-border-border-300 gmail-text-danger-000 gmail-whitespace-pre-wrap g=
mail-rounded-[0.4rem] gmail-px-1 gmail-py-px gmail-text-[0.9rem]">git confi=
g --global url.&quot;<a href=3D"mailto:[email protected]">git@gi=
tlab-ssh.wikimedia.org</a>:&quot;.insteadOf &quot;<a href=3D"mailto:git@git=
lab.wikimedia.org">[email protected]</a>:&quot;</code></p><p class=
=3D"gmail-font-claude-response-body gmail-break-words gmail-whitespace-norm=
al">Per-repo rewrites, CI jobs and ~/.ssh/config are covered in the <a clas=
s=3D"gmail-underline gmail-underline gmail-underline-offset-2 gmail-decorat=
ion-1 gmail-decoration-current/40 gmail-hover:decoration-current gmail-focu=
s:decoration-current" href=3D"https://wikitech.wikimedia.org/wiki/GitLab/Mi=
gration">migration guide</a>.=C2=A0<a class=3D"gmail-underline gmail-underl=
ine gmail-underline-offset-2 gmail-decoration-1 gmail-decoration-current/40=
 gmail-hover:decoration-current gmail-focus:decoration-current" href=3D"htt=
ps://wikitech.wikimedia.org/wiki/Wmf-laptop">wmf-laptop</a> has been update=
d, so wmf-update-known-hosts-production and wmf-update-ssh-config will refl=
ect the change.</p>Questions and feedback welcome on <a class=3D"gmail-unde=
rline gmail-underline gmail-underline-offset-2 gmail-decoration-1 gmail-dec=
oration-current/40 gmail-hover:decoration-current gmail-focus:decoration-cu=
rrent" href=3D"https://phabricator.wikimedia.org/T425441">the task</a>.<br>=
</div><div class=3D"gmail-standard-markdown gmail-grid-cols-1 gmail-grid gm=
ail-[&amp;_&gt;_*]:min-w-0 gmail-gap-3 gmail-standard-markdown">
<p class=3D"gmail-font-claude-response-body gmail-break-words gmail-whitesp=
ace-normal">Thanks!</p></div></div></div></div></div></div></div></div></di=
v></div></div></div><div dir=3D"ltr" class=3D"gmail_signature" data-smartma=
il=3D"gmail_signature"><div dir=3D"ltr"><span style=3D"color:rgb(136,136,13=
6)">--</span><br style=3D"color:rgb(136,136,136)"><div dir=3D"ltr" style=3D=
"color:rgb(136,136,136)"><div dir=3D"ltr"><table style=3D"font-size:14px;co=
lor:rgb(32,33,34);font-family:sans-serif;border:none"><tbody><tr><td style=
=3D"padding:5pt"></td><td style=3D"vertical-align:top;padding:5pt;font-size=
:9pt;line-height:1.38;font-family:Arial,sans-serif"><b>Arnaud Bran</b>=C2=
=A0(he/him)<br><span style=3D"font-size:8pt">Senior Site Reliability Engine=
er</span><br><a href=3D"https://wikimediafoundation.org/" title=3D"foundati=
onsite:" style=3D"color:rgb(102,51,102);background:none" target=3D"_blank">=
<span style=3D"color:rgb(0,0,0);font-size:8pt">Wikimedia Foundation</span><=
/a></td></tr></tbody></table></div></div></div></div></div>
</div>

--000000000000f691f90654d3109d--

--===============1095152843515206967==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Wikitech-l mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/
--===============1095152843515206967==--