[01:30:04] 10Domains, 10Traffic, 10Operations, 10WMF-Legal, 10Patch-For-Review: Move wikimedia.ee under WM-EE - https://phabricator.wikimedia.org/T204056 (10Dzahn) a:05tramm>03CRoslof [07:36:48] 10netops, 10Operations: Enable cumin1001 in router ACLs - https://phabricator.wikimedia.org/T205513 (10MoritzMuehlenhoff) [14:04:06] 10Traffic, 10Operations: Integrate certspotter with certcentral to avoid certspotter notifying us on legitimate certs generated by our certcentral boxes - https://phabricator.wikimedia.org/T204994 (10MoritzMuehlenhoff) p:05Triage>03Normal [14:54:19] Krenair: are you ok with me taking over https://gerrit.wikimedia.org/r/#/c/operations/software/certcentral/+/460382/ and https://gerrit.wikimedia.org/r/#/c/operations/software/certcentral/+/460397/ ? [14:54:51] vgutierrez, go for it [14:54:59] nice .D [15:44:59] vgutierrez, bblack: is certcentral documented somewhere? [15:45:47] not outside of the comments and README file so far [15:46:15] where is the README? [15:46:20] 10Traffic, 10Community-Tech, 10MediaWiki-Parser, 10Operations: Show SVGs in page language if available - https://phabricator.wikimedia.org/T205040 (10cscott) Note that we're using a non-standard extension to SVG in order to translate SVGs. Some earlier discussion here: {T5593}, {T60920}. That said, that... [15:46:25] I was looking for it at https://phabricator.wikimedia.org/diffusion/OSCC/browse/master/certcentral/ [15:46:50] ah https://phabricator.wikimedia.org/diffusion/OSCC/browse/master/ I guess [15:47:00] https://phabricator.wikimedia.org/diffusion/OSCC/browse/master/README.md [15:47:05] yeah [15:47:12] I'd set up a github mirror :) [15:47:40] theoretically the gerrit admin who created the repo is responsible for doing that paravoid [15:48:01] there's https://github.com/wikimedia/operations-software-certcentral, we should rename that [15:48:08] in this case it was qchris and here it is: https://github.com/wikimedia/operations-software-certcentral [15:48:12] rename it? [15:48:43] why? and how is the mirroring going to work if we rename it? [15:52:31] paravoid? [15:53:06] to make it more user-friendly, we do that sometimes [15:53:12] and we can make mirroring work, it may even happen automatically [15:53:26] https://github.com/wikimedia/pybal https://github.com/wikimedia/cumin etc. [15:53:31] well.. we have some like the puppet one or cumin.. [15:53:33] yup :) [15:53:40] they get more friendly URLs in GH [15:54:11] so we just throw the hierarchy out the window when it comes to github? [15:54:34] ok... [15:54:35] down with the hierarchy! [15:54:42] lol [15:54:54] lol [15:55:37] I don't know if we really care about making the github mirrors particularly user-friendly seeing as we don't take contribs there [15:55:40] but ok, I'll rename it [15:55:48] I'm still in nerd-sniped mode trying to finish off a few more nitpicks on gdnsd-beta [15:56:16] it seems to be redirecting so hopefully gerrit's pushes will go to the right place. difficult to tell until the next patch gets merged there [15:56:52] (making "replace" more transparent with concurrent actors executing different gdnsdctl commands, so there's no pointless failure if e.g. one script is reloading zonefiles and another is pushing acme challenges while a 3rd is replacing the daemon for a binary upgrade or config change) [15:57:22] vgutierrez, seeing as you've CR+1'd the bottom three on that big stack, maybe it's a good idea to consider merging those? [15:57:39] Krenair: go for it [15:57:54] making it so the active daemon gives a "try later" response while it's busy being replaced, which causes gdnsdctl to do so (retry and eventually succeed with the new daemon). [15:57:56] uh ok [15:58:22] and handoff of the live set of challenge data from old->new so that data set by a successful command just before the replace, stays alive [15:59:09] and the last bit to complete the replace-resiliency, is I'd really like to hand off the stats too (so stats counters just keep growing indefinitely over many daemon upgrades/reconfigs, avoiding the graph dropouts from counters resetting to zero from e.g. prometheus pov) [16:00:45] the reason I asked about doc and suggested a more user-friendly repo URL is that this sounds like a piece of software that could be universally useful [16:01:27] so it'd be nice to be a bit more public about it if possible :) [16:01:29] it's good work! [16:01:33] yeah so the rename went fine [16:01:39] new commit showed up in github [16:01:42] cool :) [16:02:52] Krenair: err.. you already have my +1, pasting the IRC talk seems an overkill :) [16:03:58] yeah but it's still questionable territory as far as the +2 policy goes [16:45:46] paravoid: fyi, you should be able to ssh to cr3/4-ulsfo.wikimedia.org now [16:46:25] XioNoX: doesn't seem to be the case [16:46:41] paravoid: through something else than bast4001 [16:47:09] are you talking from within the 14907 network? [16:47:14] yeah [16:48:32] got it [16:48:32] Telia transport/transit are up, bug BGP to the world is still disabled [16:48:40] waiting for the others [16:48:44] awesome! [16:49:16] can I help? [17:04:27] paravoid: NTT and Equinix on cr4 are not getting link, while light is good, tried different optics/router/patch so waiting on them to fix it [17:05:21] and the Zayo Transit/Transport are still TBD (most likely depending on moving them from 5th floor ro 3rd floor) [17:05:47] I'll start moving the switches over the new racks, etc.. [17:06:25] cool [17:06:26] is OOB up? [17:08:53] also when you say "tried different optics/router/patch" do you also mean MX80s? [17:12:09] NTT and Equinix terminate on cr4, so I tried a working optics/patch on cr3 [17:12:29] I'd try the MX80 given how the MX204s are new [17:13:07] still in the old racks though [17:22:04] aren't they going to be moved anyway? [17:26:27] yep, on it [19:12:17] 10Traffic, 10Operations, 10Patch-For-Review: Merge cache_misc into cache_text functionally - https://phabricator.wikimedia.org/T164609 (10Nuria) [19:22:55] 10Traffic, 10Analytics, 10Analytics-Wikistats, 10Operations, 10Regression: [Regression] stats.wikipedia.org redirect no longer works ("Domain not served here") - https://phabricator.wikimedia.org/T126281 (10Nuria) 05Open>03Resolved [19:35:58] 10netops, 10Operations, 10fundraising-tech-ops: deploy new pfw config - https://phabricator.wikimedia.org/T205574 (10cwdent) [19:52:19] 10Domains, 10Traffic, 10DNS, 10Operations, and 2 others: redirect wikipedia.gr to el.wikipedia.org - https://phabricator.wikimedia.org/T205077 (10jijiki) 05Open>03Resolved Please note that although we have enabled `*.wikipedia.gr` for misguided users, we suggest to not actively enable users to use it f... [22:01:47] 10Traffic, 10netops, 10Operations, 10ops-ulsfo, 10Patch-For-Review: Rack/cable/configure ulsfo MX204 - https://phabricator.wikimedia.org/T189552 (10ayounsi) [23:24:43] 10Wikimedia-Apache-configuration, 10Operations, 10Wikimedia-Language-setup, 10Puppet, 10Wiki-Setup (Delete / Redirect): Redirect several wikis - https://phabricator.wikimedia.org/T169450 (10Liuxinyu970226) [23:28:13] 10Traffic, 10netops, 10Operations, 10ops-ulsfo, 10Patch-For-Review: Rack/cable/configure ulsfo MX204 - https://phabricator.wikimedia.org/T189552 (10ayounsi)