[09:44:00] <wikibugs>	 10netops, 10Operations, 10Patch-For-Review: Evaluate NetBox as a Racktables replacement & IPAM - https://phabricator.wikimedia.org/T170144#3420547 (10Volans) While trying to fix the issues after the reboot for the kernel upgrade, I've opened T184634. But now it seems that the Postgres DB is empty (no tables...
[13:18:43] <wikibugs>	 10Traffic, 10Operations, 10Puppet: pybal's "can-depool" logic only takes downServers into account - https://phabricator.wikimedia.org/T184715#3893173 (10ema)
[13:19:53] <wikibugs>	 10Traffic, 10Operations, 10Puppet: pybal's "can-depool" logic only takes downServers into account - https://phabricator.wikimedia.org/T184715#3893187 (10ema) p:05Triage>03High
[13:58:44] <wikibugs>	 10Traffic, 10Operations, 10Pybal: Alert instrumentation returning 500 errors - https://phabricator.wikimedia.org/T184721#3893341 (10ema)
[13:58:54] <wikibugs>	 10Traffic, 10Operations, 10Pybal: Alert instrumentation returning 500 errors - https://phabricator.wikimedia.org/T184721#3893351 (10ema) p:05Triage>03High
[14:03:06] <wikibugs>	 10Traffic, 10Operations, 10Pybal: pybal's "can-depool" logic only takes downServers into account - https://phabricator.wikimedia.org/T184715#3893353 (10ema)
[14:36:58] <wikibugs>	 10netops, 10Operations, 10fundraising-tech-ops: switch network port 2/0/3 (frdb1003) back to administration-vlan - https://phabricator.wikimedia.org/T184723#3893410 (10Jgreen)
[16:25:09] <_joe_>	 ema, bblack if you don't have objections, I'll merge my base::resolving patch tomorrow morning
[16:25:14] <_joe_>	 I'm going off now
[16:43:26] <bblack>	 _joe_: +1
[17:01:07] <wikibugs>	 10Traffic, 10Analytics-Cluster, 10Analytics-Kanban, 10Operations, and 2 others: TLS security review of the Kafka stack - https://phabricator.wikimedia.org/T182993#3894034 (10Ottomata) Here's a Q:  In cergen, I'm generating EC keys using a [[ https://cryptography.io/en/latest/hazmat/primitives/asymmetric/ec...
[19:02:18] <wikibugs>	 10Traffic, 10Analytics-Cluster, 10Analytics-Kanban, 10Operations, and 2 others: TLS security review of the Kafka stack - https://phabricator.wikimedia.org/T182993#3894549 (10BBlack) No, it's not a problem.  For certificates, `NIST P-256` (aka `secp256r1`, aka `prime256v1`, depending on who's talking) is re...
[19:30:07] <bblack>	 ^ in related news: https://www.eff.org/deeplinks/2018/01/house-fails-protect-americans-unconstitutional-nsa-surveillance
[19:47:26] <wikibugs>	 10Traffic, 10Analytics-Cluster, 10Analytics-Kanban, 10Operations, and 2 others: TLS security review of the Kafka stack - https://phabricator.wikimedia.org/T182993#3894725 (10Ottomata) > Oook, I've set this [restricted certpath algorithms] on all jumbo Kafka brokers.  Welp, something is totally crazy with P...
[21:28:46] <wikibugs>	 10Traffic, 10Varnish, 10Fr-tech-archived-from-FY-14/15, 10MediaWiki-extensions-CentralNotice, and 4 others: Spike: what to do about Special:RecordImpression and Banner History - https://phabricator.wikimedia.org/T88614#3895142 (10DStrine)
[21:42:43] <wikibugs>	 10Traffic, 10Varnish, 10Fr-tech-archived-from-FY-2015/16, 10MediaWiki-extensions-CentralNotice, and 6 others: Eliminate PHP backend call for Special:RecordImpression - https://phabricator.wikimedia.org/T106624#3895354 (10DStrine)
[21:45:29] <wikibugs>	 10Traffic, 10DNS, 10Fr-tech-archived-from-FY-2015/16, 10Operations: donate.wikimedia.org needs an MX record - https://phabricator.wikimedia.org/T120322#3895466 (10DStrine)
[22:29:31] <mutante>	 bblack: see mail from Jeff about Paul Vixie, heh
[22:41:01] <wikibugs>	 10Traffic, 10Analytics-Cluster, 10Analytics-Kanban, 10Operations, and 2 others: TLS security review of the Kafka stack - https://phabricator.wikimedia.org/T182993#3895798 (10Ottomata) Current status:  kafka-jumbo running with Requested Signature Algorithms: ECDSA+SHA512:RSA+SHA512:ECDSA+SHA384:RSA+SHA384:E...