In T2124#32520, @dereckson wrote:

Next steps for full automation:

• allow to login with proper credentials
  • Vault via rOPS: Create a permission for access to relevant credentials (see first comment of this post, acquisitariat not needed)
  • Vault manually: Create an AppRole linked to that permission
  • Code: allow to login to Vault with AppRole when available in environment or when a file exists, TO IMPLEMENT FOR BOTH TOOLS (bot needs Agora, run-report needs db-B-001).
• deploy the bot on WindRiver
  • Vault via rOPS: credentials to query Vault (ie secret id and role id from the AppRole)
  • Salt: create rhyne-wyse user
  • Salt: create /var/db/rhyne-wyse, chown to rhyne-wyse:nasquenautes in 775, so everyone can run the bot too
  • Salt: provide /etc/periodic configuration to run the script daily

Just for information, log doesn't have any timestamp.

At this stage, we've an auto update working when running the helper script manually:

Releasing the task assignment.

Deployed on WindRiver. Anyone with a vault token valid for ops/secrets/dbserver/cluster-B/users/rhyne-wyse can run there:

Claiming temporarily for credentials and if time allows this evening write helpers script. Will release afterwards, so anyone can create the bot.

On Agora, an account name is required for the automated agent / bot.
The agent will be called Rhyne-Wyse [1].

The documentation is now more comprehensive and include the steps to contribute.

That workflow has been added to the main documentation page.

Mumble isn't currently in scope.

Plan is to temporarily increase $wgMaxImageArea from 12500000 to 15000000, so we can generate thumbnail for our files.

I moved my WikiMedia development environment from Ysul to WindRiver, so we can have a faster https://mediawiki.dereckson.be/ to test this.