Jump to content

Phabricator/Conduit API Tokens

From Wikitech

Wikimedia's SRE and Release Engineering teams maintain several automated processes which utilize Phabricator Bot accounts to access Phabricator's Conduit API. This list is an attempt to document all of these bots and where their api tokens are used.


A list of all Phabricator bot accounts is available by using the "Active Bots" query.

Bots maintained by RelEng & SRE

GerritBot

Phab account GerritBot
Purpose Gerrit posts code-review status updates in phabricator
Configuration
  • modules/gerrit/manifests/jetty.pp
  • passwords::gerrit (private puppet repo)
  • there is a gerritbot_token in the private repo passed to modules/profile/manifests/phabricator/main.pp and then modules/phabricator/manifests/tools.pp but seems unused.

ops-monitoring-bot

Phab account ops-monitoring-bot
Purpose Used by automation tools to update Phabricator tasks
Configuration
  • modules/icinga/manifests/event_handlers/raid.pp
  • modules/profile/manifests/cumin/master.pp
  • passwords::phabricator (private puppet repo)

offboarding

Phab account offboarding
Purpose Offboarding script
Configuration
  • modules/profile/manifests/openldap/management.pp
  • passwords::phabricator (private puppet repo)

ProdPasteBot

Phab account ProdPasteBot
Purpose Phaste script to create paste from prod servers
Configuration
  • modules/base/manifests/phaste.pp
  • passwords::phabricator (private puppet repo)

bzimport

Phab account bzimport
Purpose Old bugzilla import script, deprecated
Configuration
  • modules/profile/manifests/phabricator/main.pp -> modules/phabricator/manifests/tools.pp -> modules/phabricator/templates/phabtools.conf.erb
  • passwords::phabricator (private puppet repo)


Bots maintained by WMCS

StrikerBot

Phab account StrikerBot
Purpose Bot account used by toolsadmin.wikimedia.org
Configuration

FIXME: in the private repo somewhere, as the phabricator.TOKEN key in the striker::uwsgi::secret_config hiera map


Stashbot

Phab account Stashbot
Purpose Bot account used by Tool:Stashbot
Configuration

/data/project/stashbot/etc/config-k8s.yaml on Toolforge


PhabBanBot

Phab account PhabBanBot
Purpose Bot account used by Tool:Phab-ban and Wikitech BlockIpComplete hooks
Configuration
  • /data/project/phab-ban/www/python/src/config.yaml on Toolforge
  • FIXME: in the private repo somewhere, as the profile::openstack::base::wikitech::web::phabricator_api_token hiera setting


Bots maintained by the community

PywikiBugs

Phab account PywikiBugs
Purpose Sends IRC notifications about activity in Phabricator
Configuration


See Also