hi all i wanted to say that the sso project is used so that users have an SSO testing infrastructure to use in cloud services. Originally this was also used to provide sso to production like services in cloud services, however this later functionality has been moved.

If there is still a desire to keep a development environment then we will still need all theses machines

• puppetprimary.sso.eqiad1.wikimedia.cloud: The project uses its own puppet master as we have secrets
• sso-db.sso.eqiad1.wikimedia.cloud: This is a mysql db used to store e.g. mfa keys
• sso-pdb.sso.eqiad1.wikimedia.cloud: A puppet db instance, not sure why this is used but guessing the idp classes somehow need some puppetdb functionality.

In T367554#9899621, @jbond wrote:

hi all i wanted to say that the sso project is used so that users have an SSO testing infrastructure to use in cloud services. Originally this was also used to provide sso to production like services in cloud services, however this later functionality has been moved.

If there is still a desire to keep a development environment then we will still need all theses machines

• puppetprimary.sso.eqiad1.wikimedia.cloud: The project uses its own puppet master as we have secrets
• sso-db.sso.eqiad1.wikimedia.cloud: This is a mysql db used to store e.g. mfa keys
• sso-pdb.sso.eqiad1.wikimedia.cloud: A puppet db instance, not sure why this is used but guessing the idp classes somehow need some puppetdb functionality.

Thanks! I asked around and o11y doesn't currently use them either. We're currently in the process of moving to CAS 7 which is totally differnt in many regards, so we'll simply remove these for now and when the need arises we'll recreate the setup based on Bookworm/CAS 7.