[00:33:56] 10Traffic, 10DNS, 10Operations, 10Release-Engineering-Team, and 2 others: Move Foundation Wiki to new URL when new Wikimedia Foundation website launches - https://phabricator.wikimedia.org/T188776#4262808 (10Varnent) @greg - July 30 has been set as target launch date. [02:54:51] 10Traffic, 10Operations, 10ops-codfw: rack/setup/install LVS200[7-10] - https://phabricator.wikimedia.org/T196560#4262895 (10Papaul) [07:41:05] 10netops, 10Operations, 10cloud-services-team: modify labs-hosts1-vlans for http load of installer kernel - https://phabricator.wikimedia.org/T190424#4263117 (10ayounsi) It looks like the dhcp bit is something like: ``` option pxelinux.pathprefix "http://apt.wikimedia.org/tftpboot/jessie-installer/"; filena... [08:16:55] 10Traffic, 10netops, 10Operations: cp intermittent IPsec MTU issue - https://phabricator.wikimedia.org/T195365#4263188 (10ayounsi) Created https://gerrit.wikimedia.org/r/#/c/437784/ to force the mtu to 1450 for IPsec links. [08:28:10] 10netops, 10Operations, 10fundraising-tech-ops, 10ops-codfw: switch port configuration for frbast2001 - https://phabricator.wikimedia.org/T196503#4263201 (10ayounsi) 05Open>03Resolved ```lang=diff [edit interfaces interface-range disabled] - member ge-0/0/15; - member ge-1/0/15; [edit interfaces... [09:02:16] morning ema [09:02:58] i think those two words don't go well together [09:03:18] we were talking yesterday in -analytics the possibility of getting rid of the X-Analytics header using std.log (VCL_Log) to provide the info to varnishkafka [09:03:38] mark: haha [09:03:45] :) [09:06:10] ema: of course I waved my newbie flag and I told'em that I'd discuss it with the grown-up guys [09:06:20] ema: but I think that's feasible [09:08:01] ema: thoughts? :) [09:08:02] vgutierrez: +1, yes [09:08:09] :D [09:08:20] I also added it as a suggestion/question on the phab task [09:08:28] nice [09:08:40] now please stop mentioning interesting things, I'm writing reviews [09:09:14] it won't happen again sir! [09:09:26] * vgutierrez is slacking on his reviews [09:09:35] * vgutierrez reviewing debmonitor security [09:10:01] * volans thanking vgutierrez for doing that and distracting me from reviews :) [10:50:42] should I wait some more reviews before merging https://gerrit.wikimedia.org/r/#/c/437761/ ? [10:52:27] volans: how about using data types for ensure/content/source ? [10:52:51] sure [10:53:36] puppet has data types these days? [10:53:43] yes :) [10:54:09] ok! i suppose the next question would be: [10:54:12] how have they screwed that up? :) [10:54:27] in many ways! :d [10:56:12] lol [10:57:35] but not as bad as the data mangling part [11:00:17] I mean, who doesn't want a reduce() function that as this awesome feature: [11:00:20] If the structure has one value, Puppet returns the value and does not call the lambda. [11:00:47] s/as/has/ [11:03:38] ema: btw, do you know if that module is userd by 3rd parties? I'm wondering if we somehome implicitely have a backward compatibilty there [11:04:14] that types will break. I hope not given that it would be a veeery old puppet, but you know, it's puppet world [11:04:43] lol [11:05:15] so probably they implemented it badly with that bug, and then documented it as a feature [11:05:52] lol, probably! The only thing I know is that I had to manage the 1 item case separately... DRY FTW [11:08:43] ema: In particular I'm also wondering if I can use Wmflib::Ensure from our wmflib... [11:09:37] volans: yeah, valid concerns [11:10:13] it would become: [11:10:14] Wmflib::Ensure $ensure = present, [11:10:14] Optional[String] $content = undef, [11:10:14] Optional[Wmflib::Sourceurl] $source = undef, [11:11:25] BTW I see we're using an external class in manifests/simple_tlsproxy.pp (diamond::collector), is that ok? [11:13:21] lol, no cross module deps shouldn't be there [11:13:28] ::base::expose_puppet_certs also doesn't seem like something that should belong to a reusable module :) [11:14:45] eheheh [11:15:03] so we can definitely say that is not reusable and we could drop the git submodule? :D [11:15:15] and include it into the main puppet repo [11:16:15] that'd be a net win IMHO, yes [11:28:46] 10Traffic, 10Operations, 10RESTBase-API, 10Services (done): Normalise the Accept-Language header for REST API requests - https://phabricator.wikimedia.org/T195327#4263655 (10mobrovac) 05Open>03Resolved Thank you @ema ! [12:37:48] 10Traffic, 10Operations, 10User-Johan: Provide a multi-language user-faced warning regarding AES128-SHA deprecation - https://phabricator.wikimedia.org/T196371#4263793 (10Vgutierrez) As @BBlack said, I think considering other projects for our scope (0,08% of the requests) it's a little bit of an overkill, so... [14:59:08] 10Traffic, 10Operations, 10media-storage, 10Patch-For-Review, 10Performance-Team (Radar): Reduce amount of headers sent from web responses - https://phabricator.wikimedia.org/T194814#4209672 (10Nuria) Or (maybe crazy thought) remove the headers entirely at the nginx layer while varnish work of reorganizi... [16:57:05] 10netops, 10Operations, 10fundraising-tech-ops: adjust NAT mapping for frdata.wikimedia.org - https://phabricator.wikimedia.org/T196656#4264802 (10Jgreen) [16:57:45] 10Traffic, 10Operations, 10Wikimania-Hackathon-2018, 10Availability (MediaWiki-MultiDC), 10Services (watching): Create HTTP verb and sticky cookie DC routing in VCL - https://phabricator.wikimedia.org/T91820#4264815 (10mobrovac) [17:03:32] 10Traffic, 10Operations, 10User-Johan: Provide a multi-language user-faced warning regarding AES128-SHA deprecation - https://phabricator.wikimedia.org/T196371#4264832 (10Vgutierrez) >>! In T196371#4258991, @Johan wrote: > OK. So I'll ask for > > //Wikipedia is making the site more secure. You are using an... [17:56:22] 10netops, 10Operations, 10ops-eqiad: upgrade row d to have 3 10G switches - https://phabricator.wikimedia.org/T196487#4265184 (10Cmjohnson) [17:56:26] 10netops, 10Operations, 10ops-eqiad: upgrade row d to have 3 10G switches - https://phabricator.wikimedia.org/T196487#4258394 (10Cmjohnson) I racked the switch in D4, updated racktables [18:20:11] 10netops, 10Operations, 10ops-eqiad: replace mr1-eqiad - https://phabricator.wikimedia.org/T185171#4265312 (10Cmjohnson) @ayounsi the new mr1 is in the rack, powered on and connected to the current mr1-eqiad console cable. [20:01:41] 10Traffic, 10DNS, 10Operations, 10ops-codfw: rack/setup/install dns200[12].wikimedia.org - https://phabricator.wikimedia.org/T196493#4265599 (10Papaul) [20:06:11] 10Traffic, 10DNS, 10Operations, 10ops-codfw: rack/setup/install dns200[12].wikimedia.org - https://phabricator.wikimedia.org/T196493#4265615 (10Papaul) [20:16:02] 10netops, 10Operations, 10ops-codfw: upgrade all codfw switch stacks to include additional 10G switch per row - https://phabricator.wikimedia.org/T196489#4265639 (10RobH) [20:33:05] 10Traffic, 10DNS, 10Operations, 10ops-eqiad: rack/setup/install dns100[12].wikimedia.org - https://phabricator.wikimedia.org/T196691#4265662 (10RobH) p:05Triage>03Normal [20:35:22] 10Traffic, 10DNS, 10Operations, 10ops-eqiad: rack/setup/install authdns1001.wikimedia.org - https://phabricator.wikimedia.org/T196693#4265704 (10RobH) p:05Triage>03Normal