Stop paying for auth0

[yuvipanda]

I think we pay some money to auth0 now. After @GeorgianaElena's work, we no longer need to! We should stop paying them.

[jmunroe]

I think @choldgraf is the only one with the admin/password for that (reference).

Chris -- did you want to check if there is a automatically billed plan that need to be cancelled?

[GeorgianaElena]

With the permissions I have, I was able to switch the 2i2c subscription to the free plan 🎉

[GeorgianaElena]

Haven't deleted the client apps yet, but I don't think they're usable anymore, as there's a 10 apps limit with the free plan and we definitely have more than that:

I'm seeing some jmte names in the app list. @consideRatio I believe these were set by you? Do you know if they are used in some jmte hub that resides outside of 2i2c/infrastructure?

[colliand]

2i2c's ramp credit card was charged $23 on March 11. This leads me to expect that the next charge will take place during the second week of April. I suggest the following next steps:

• Engineering confirms Auth0 can be turned off (pending jmte question posed by @GeorgianaElena to @consideRatio above). Proposed deadline April 4.
• Auth0 payment is turned off by @choldgraf . Proposed deadline April 7.

[choldgraf]

Happy to turn it off when somebody pings me (please assign me to an issue or ping me directly on Slack, as if it's just a mention I'll likely miss it)

[consideRatio]

jmte-prod and jmte-staging as auth0 applications, coupled to github, is actively in use still based on infrastructure config found in #436, so deleting them will break JMTE which currently actually works I think.

Maybe they can take up 2 of the ten free slots for now until we have migrated the JMTE hub as tracked by #2201?

[GeorgianaElena]

Maybe they can take up 2 of the ten free slots for now until we have migrated the JMTE hub as tracked by #2201?

Of course! Then, next thing is to delete all the other ones that we don't use, to make sure that the jmte ones work. Thanks for the info @consideRatio

[GeorgianaElena]

Done! We now have under 10 Auth0 apps, and we are on the free subscription plan, so no money should be charged for the Auth0 service in April. I'm not sure there are any action points left here?

[damianavila]

I'm not sure there are any action points left here?

I presume when JTME is migrated off auth0 we can just show turn it if off and delete the account?
In any case, if there is not charge during April, I think we can call this one done as per the original goal to stop paying auth0.

[yuvipanda]

OK, JMTE has been moved off auth0 now! So we can fully stop paying for it.

thank you, auth0, for letting us get started quickly! Goodbye!

[choldgraf]

What is the action to stop paying them that is needed? Do I need to take that action now?

[damianavila]

I think we are currently in a free tier. I suppose the next step would be to get rid of the account.
@GeorgianaElena (might have more information) can you confirm I am actually correct about this one?

[GeorgianaElena]

Yes, we're not supposed to be paying anything to Auth0 currently as we're on the free tier. So we might as well delete the account entirely?

[choldgraf]

Ah no we have been paying Auth0 roughly $23 a month for the last 2 years...

ok well this is pretty weird. It says our subscription is Free:

But that we've been paying $23/mo for a while:

Could we have just recently begun the free tier and were paying before?

[GeorgianaElena]

Could we have just recently begun the free tier and were paying before?

@choldgraf, totally. I changed us to the free tier, once the move to cilogon was complete.

So if you have available the button that deletes the account feel free to push it as we aren't using Auth0 anywhere I believe

[choldgraf]

Sounds good - if we delete our Auth0 account, we won't be able to use the name 2i2c in the future. Can we imagine a situation where we'd want to re-use this? If so, we can just park it in free tier mode and document this decision for future reference.

(by the way, thanks for thinking to switch to the free tier, that is much appreciated!)

[consideRatio]

👍 for not deleting it, ifs free after all for us to retain it now, and we have accounts and credentials in it setup etc already.

[GeorgianaElena]

Agree! Let's close this issue then, as we're not actually paying for it anymore and keep track of its existence in 2i2c-org/team-compass#714