Re: GitLab SSH is moving to gitlab-ssh.wikimedia.org

--===============2854635829928851546==
Content-Type: multipart/alternative; boundary="000000000000491bd206567b2674"

--000000000000491bd206567b2674
Content-Type: text/plain; charset="UTF-8"

Is the fingerprint for the new host anywhere? It's not on Help:SSH
Fingerprints <https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints>.

*Sebastian Berlin*
Utvecklare/*Developer*
Wikimedia Sverige (WMSE)

E-post/*E-Mail*: [email protected]
Telefon/*Phone*: (+46) 0707 - 92 03 84


On Mon, 22 Jun 2026 at 10:20, Arnaud Bran via Wikitech-l <
[email protected]> wrote:

> Hi all,
>
> Heads up: as part of putting GitLab behind a CDN (T425441
> <https://phabricator.wikimedia.org/T425441>), SSH access for git commands
> is moving to a dedicated hostname: gitlab-ssh.wikimedia.org. This only
> affects SSH git access. HTTPS clones are unaffected.
>
>
>    - The new hostname is available now.
>    - Starting tomorrow (June 23rd) morning, GitLab will advertise it
>    <https://gerrit.wikimedia.org/r/c/operations/puppet/+/1300763> on new
>    git clone commands, so new clones will use it automatically.
>    - gitlab.wikimedia.org will stay reachable over SSH for git commands
>    until GitLab moves behind the CDN. We'll announce the change before it
>    happens. After that, gitlab.wikimedia.org will no longer be reachable
>    via SSH.
>
> The quickest way to switch remotes all at once would be:
>
> git config --global url."[email protected]:".insteadOf "
> [email protected]:"
>
> Per-repo rewrites, CI jobs and ~/.ssh/config are covered in the migration
> guide <https://wikitech.wikimedia.org/wiki/GitLab/Migration>. wmf-laptop
> <https://wikitech.wikimedia.org/wiki/Wmf-laptop> has been updated, so
> wmf-update-known-hosts-production and wmf-update-ssh-config will reflect
> the change.
> Questions and feedback welcome on the task
> <https://phabricator.wikimedia.org/T425441>.
>
> Thanks!
> --
> *Arnaud Bran* (he/him)
> Senior Site Reliability Engineer
> Wikimedia Foundation <https://wikimediafoundation.org/>
> _______________________________________________
> Wikitech-l mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/

--000000000000491bd206567b2674
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Is the fingerprint for the new host anywhere? It&#39;=
s not on=C2=A0<a href=3D"https://wikitech.wikimedia.org/wiki/Help:SSH_Finge=
rprints">Help:SSH Fingerprints</a>.</div><div><div dir=3D"ltr" class=3D"gma=
il_signature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><div><div=
 dir=3D"ltr"><div><div dir=3D"ltr"><span><div><div dir=3D"ltr"><div><div><b=
><br></b></div><div><b>Sebastian Berlin</b><br><span>Utvecklare/<i>Develope=
r</i></span></div><div>Wikimedia Sverige (WMSE)<br></div><br></div>E-post/<=
i>E-Mail</i>: <a href=3D"mailto:[email protected]" target=3D"_b=
lank">[email protected]</a><br>
Telefon/<i>Phone</i>: (+46) 0707 - 92 03 84</div></div></span></div></div><=
/div></div></div></div></div><br></div><br><div class=3D"gmail_quote gmail_=
quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, 22 Jun 2026 =
at 10:20, Arnaud Bran via Wikitech-l &lt;<a href=3D"mailto:wikitech-l@lists=
.wikimedia.org">[email protected]</a>&gt; wrote:<br></div><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left=
:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div dir=3D"=
ltr"><div><div><div><div><div><div role=3D"group" aria-label=3D"Message act=
ions"><div><div><div></div></div></div></div></div></div></div></div></div>=
<div><div><div style=3D"height:auto;opacity:1"><div><div style=3D"opacity:1=
"><div><div><div><div><div><div><div><p>Hi all,</p>
<p>Heads up: as part of putting GitLab behind a CDN (<a href=3D"https://pha=
bricator.wikimedia.org/T425441" target=3D"_blank">T425441</a>), SSH access =
for git commands is moving to a dedicated hostname: <a href=3D"http://gitla=
b-ssh.wikimedia.org" target=3D"_blank">gitlab-ssh.wikimedia.org</a>. This o=
nly affects SSH git access. HTTPS clones are unaffected.</p>
<p></p>
<ul><li>The new hostname is available now.</li><li>Starting tomorrow (June =
23rd) morning, GitLab <a href=3D"https://gerrit.wikimedia.org/r/c/operation=
s/puppet/+/1300763" target=3D"_blank">will advertise it</a> on new git clon=
e commands, so new clones will use it automatically.</li><li><a href=3D"htt=
p://gitlab.wikimedia.org" target=3D"_blank">gitlab.wikimedia.org</a> will s=
tay reachable over SSH for git commands until GitLab moves behind the CDN. =
We&#39;ll announce the change before it happens. After that, <a href=3D"htt=
p://gitlab.wikimedia.org" target=3D"_blank">gitlab.wikimedia.org</a> will n=
o longer be reachable via SSH.</li></ul>
<p>The quickest way to switch remotes all at once would be:</p>
<p><code>git config --global url.&quot;<a href=3D"mailto:[email protected]=
imedia.org" target=3D"_blank">[email protected]</a>:&quot;.inste=
adOf &quot;<a href=3D"mailto:[email protected]" target=3D"_blank">gi=
[email protected]</a>:&quot;</code></p><p>Per-repo rewrites, CI jobs a=
nd ~/.ssh/config are covered in the <a href=3D"https://wikitech.wikimedia.o=
rg/wiki/GitLab/Migration" target=3D"_blank">migration guide</a>.=C2=A0<a hr=
ef=3D"https://wikitech.wikimedia.org/wiki/Wmf-laptop" target=3D"_blank">wmf=
-laptop</a> has been updated, so wmf-update-known-hosts-production and wmf-=
update-ssh-config will reflect the change.</p>Questions and feedback welcom=
e on <a href=3D"https://phabricator.wikimedia.org/T425441" target=3D"_blank=
">the task</a>.<br></div><div>
<p>Thanks!</p></div></div></div></div></div></div></div></div></div></div><=
/div></div><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr"><spa=
n style=3D"color:rgb(136,136,136)">--</span><br style=3D"color:rgb(136,136,=
136)"><div dir=3D"ltr" style=3D"color:rgb(136,136,136)"><div dir=3D"ltr"><t=
able style=3D"font-size:14px;color:rgb(32,33,34);font-family:sans-serif;bor=
der:medium"><tbody><tr><td style=3D"padding:5pt"></td><td style=3D"vertical=
-align:top;padding:5pt;font-size:9pt;line-height:1.38;font-family:Arial,san=
s-serif"><b>Arnaud Bran</b>=C2=A0(he/him)<br><span style=3D"font-size:8pt">=
Senior Site Reliability Engineer</span><br><a href=3D"https://wikimediafoun=
dation.org/" title=3D"foundationsite:" style=3D"color:rgb(102,51,102);backg=
round:none" target=3D"_blank"><span style=3D"color:rgb(0,0,0);font-size:8pt=
">Wikimedia Foundation</span></a></td></tr></tbody></table></div></div></di=
v></div></div>
</div>
_______________________________________________<br>
Wikitech-l mailing list -- <a href=3D"mailto:[email protected]=
" target=3D"_blank">[email protected]</a><br>
To unsubscribe send an email to <a href=3D"mailto:[email protected]=
kimedia.org" target=3D"_blank">[email protected]</a><br>
<a href=3D"https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wik=
imedia.org/" rel=3D"noreferrer" target=3D"_blank">https://lists.wikimedia.o=
rg/postorius/lists/wikitech-l.lists.wikimedia.org/</a></blockquote></div>

--000000000000491bd206567b2674--

--===============2854635829928851546==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Wikitech-l mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/
--===============2854635829928851546==--