Phabricator/Conduit API Tokens

Wikimedia's SRE and Release Engineering teams maintain several automated processes which utilize Phabricator Bot accounts to access Phabricator's Conduit API. This list is an attempt to document all of these bots and where their api tokens are used.

A list of all Phabricator bot accounts is available by using the "Active Bots" query.

Bots maintained by RelEng & SRE

GerritBot

Phab account	GerritBot
Purpose	Gerrit posts code-review status updates in phabricator
Configuration	modules/gerrit/manifests/jetty.pp passwords::gerrit (private puppet repo) there is a gerritbot_token in the private repo passed to modules/profile/manifests/phabricator/main.pp and then modules/phabricator/manifests/tools.pp but seems unused.

ops-monitoring-bot

Phab account	ops-monitoring-bot
Purpose	Used by automation tools to update Phabricator tasks
Configuration	modules/icinga/manifests/event_handlers/raid.pp modules/profile/manifests/cumin/master.pp passwords::phabricator (private puppet repo)

offboarding

Phab account	offboarding
Purpose	Offboarding script
Configuration	modules/profile/manifests/openldap/management.pp passwords::phabricator (private puppet repo)

ProdPasteBot

Phab account	ProdPasteBot
Purpose	Phaste script to create paste from prod servers
Configuration	modules/base/manifests/phaste.pp passwords::phabricator (private puppet repo)

bzimport

Phab account	bzimport
Purpose	Old bugzilla import script, deprecated
Configuration	modules/profile/manifests/phabricator/main.pp -> modules/phabricator/manifests/tools.pp -> modules/phabricator/templates/phabtools.conf.erb passwords::phabricator (private puppet repo)

Bots maintained by WMCS

StrikerBot

Phab account	StrikerBot
Purpose	Bot account used by toolsadmin.wikimedia.org
Configuration	FIXME: in the private repo somewhere, as the `phabricator.TOKEN` key in the `striker::uwsgi::secret_config` hiera map

Stashbot

Phab account	Stashbot
Purpose	Bot account used by Tool:Stashbot
Configuration	/data/project/stashbot/etc/config-k8s.yaml on Toolforge

PhabBanBot

Phab account	PhabBanBot
Purpose	Bot account used by Tool:Phab-ban and Wikitech BlockIpComplete hooks
Configuration	/data/project/phab-ban/www/python/src/config.yaml on Toolforge FIXME: in the private repo somewhere, as the `profile::openstack::base::wikitech::web::phabricator_api_token` hiera setting

Bots maintained by the community

PywikiBugs

Phab account	PywikiBugs
Purpose	Sends IRC notifications about activity in Phabricator
Configuration