Page MenuHomePhabricator

Use separate credentials for production instance to connect to labsdb
Closed, ResolvedPublic

Description

The production, staging, and dev instances of wikimetrics all use the same
credentials to connect to labsdb.

So if dev or staging run wild and open up as many connections as allowed,
they can starve the production instance.

Hence, we should use separate labsdb credentials for the different instances.

(Especially, since bug 68833 currently bites us too.)


Version: unspecified
Severity: normal
Whiteboard: u=Community c=Wikimetrics p=0 s=2014-07-24

Details

Reference
bz69043

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 3:30 AM
bzimport set Reference to bz69043.
bzimport added a subscriber: Unknown Object (MLST).

Sorry, used wrong component.

EventLogging -> Wikimetrics

(In reply to christian from comment #0)

So if dev or staging run wild and open up as many connections as allowed,
they can starve the production instance.

This is not a hypothetical thing:

http://lists.wikimedia.org/pipermail/wikimetrics/2014-August/000148.html

I created the Tool Labs tools

tools.wikimetrics-production
tools.wikimetrics-staging
tools.wikimetrics-development

, granted access to Milimetric, Nuria, and myself to them, and used
the corresponding labsdb connections on our instances

+----------------------+------------------------------------+-------------------------------+-------------+
| Instance name        | URL                                | Tool Labs tool                | Labsdb user |
+----------------------+------------------------------------+-------------------------------+-------------+
| wikimetrics1         | http://metrics.wmflabs.org         | tools.wikimetrics-production  | s52261      |
| wikimetrics-staging1 | http://metrics-staging.wmflabs.org | tools.wikimetrics-staging     | s52262      |
| wikimetrics-dev1     | http://metrics-dev.wmflabs.org     | tools.wikimetrics-development | s52263      |
+----------------------+------------------------------------+-------------------------------+-------------+