[08:05:48] <wikibugs>	 10Traffic, 10Operations: Update certspotter - https://phabricator.wikimedia.org/T204993 (10MoritzMuehlenhoff) The Icinga servers in production are now running 0.9-1~bpo9+1, but the Cron job still needs to be re-instated.
[10:29:40] <paravoid>	 moritzm: this is a bit of a moving target... there's a 0.9-2
[10:29:52] <paravoid>	 with a backported fix
[13:38:18] <wikibugs>	 10Traffic, 10Operations, 10Continuous-Integration-Infrastructure (Slipway): CI jobs for authdns linting need to run on Stretch - https://phabricator.wikimedia.org/T205439 (10hashar) Part of the project to migrate all CI jobs to Docker containers (#ci-slipway )
[14:39:57] <vgutierrez>	 certcentral so far hasn't failed a single certificate issuance O:)
[14:40:05] <Krenair>	 yay
[14:50:33] <elukey>	 nice work! At some point we can also migrate archiva to it?
[14:51:16] <vgutierrez>	 sure :)
[14:51:19] <vgutierrez>	 we're taking care of "private" services first
[14:51:37] <elukey>	 sure sure :)
[14:52:46] <Krenair>	 elukey, fwiw the list is at https://phabricator.wikimedia.org/T207050
[14:52:52] <Krenair>	 I dunno if we're necessarily doing it in order but
[14:53:19] <Krenair>	 tendril is mid-process, then there's apt and archiva
[14:53:59] <Krenair>	 I've actually never interacted with archiva to my knowledge, the others are more scary to muck with
[14:54:09] <Krenair>	 might be worth doing archiva first of the public ones elukey vgutierrez ?
[14:54:24] <vgutierrez>	 sure, as elukey is volunteering for that
[14:54:28] <vgutierrez>	 O:)
[14:55:01] <Krenair>	 haha maybe lets get that confirmed from elu.key first
[14:55:26] <Krenair>	 also I see the old foundation logo on that site
[14:55:43] <elukey>	 I can definitely work with you guys for archiva
[14:58:39] <Krenair>	 I also dunno how this all comes out in terms of scheduling
[14:59:02] <Krenair>	 seeing as its a friday and a US holiday etc.
[15:00:30] <vgutierrez>	 yup... if elukey doesn't mind, let's wait till Monday
[15:00:36] <vgutierrez>	 it should be pretty low risk but I don't want to mess with something public on a Friday afternoon
[15:01:31] <vgutierrez>	 Krenair: BTW; we should revisit at some point librenms and netbox and get rid of the apache2 config handling http-01 challenges there
[15:01:44] <vgutierrez>	 I just saw that piece of config in tendril while submitting my last commit
[15:02:33] <Krenair>	 vgutierrez, it'll just be deploying the standard templates for http-01 handling right?
[15:02:38] <Krenair>	 we can turn that off in our setup
[15:03:07] <vgutierrez>	 we don't need http-01 config at all there cause we are using it dns-01
[15:03:32] <elukey>	 +1 for next week :)
[15:03:52] <vgutierrez>	 I'm talking about https://github.com/wikimedia/puppet/blob/production/modules/tendril/templates/apache/tendril.wikimedia.org.erb#L39-L49
[15:04:01] <vgutierrez>	 it's a leftover from the old LE puppetization
[15:04:14] <vgutierrez>	 I guess that something similar it's there in librenms and netbox templates
[15:08:21] <Krenair>	 oh that
[15:08:23] <Krenair>	 sure
[15:14:44] <wikibugs>	 10Traffic, 10Operations: ATS path normalization - https://phabricator.wikimedia.org/T210295 (10ema) p:05Triage>03Normal
[15:19:34] <wikibugs>	 10Traffic, 10Operations: ATS path normalization - https://phabricator.wikimedia.org/T210295 (10ema)
[15:26:31] <vgutierrez>	 Krenair: so https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/475482/ and https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/475483/
[15:27:14] <Krenair>	 vgutierrez, did you also get rid of the letsencrypt::cert::integrated resources?
[15:28:36] <vgutierrez>	 yes.. that's already merged in https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/475335/ and https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/474747/ (this one is yours)
[15:29:01] <vgutierrez>	 we only forgot about the http-01 challenge config
[15:30:13] <Krenair>	 hah forgot I did that
[15:30:14] <Krenair>	 okay then
[15:32:20] <vgutierrez>	 take a look to https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/475481/ as well please :)
[15:35:34] <vgutierrez>	 thx
[15:40:56] <wikibugs>	 10Traffic, 10Operations, 10Patch-For-Review: Migrate most standard public TLS certificates to CertCentral issuance - https://phabricator.wikimedia.org/T207050 (10Vgutierrez)
[16:16:44] <wikibugs>	 10Traffic, 10Operations: ATS path normalization - https://phabricator.wikimedia.org/T210295 (10ema) I now see that @BBlack prepped https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/407643/ to bring reality closer to theory by adding the missing characters to `{mediawiki,restbase}_encode` -- with a caveat...
[16:18:35] <wikibugs>	 10Traffic, 10Operations, 10Patch-For-Review: ATS backend-side request-mangling - https://phabricator.wikimedia.org/T209021 (10ema)
[16:26:24] <wikibugs>	 10Traffic, 10Operations: Renew Digicert Unified in 2019 - https://phabricator.wikimedia.org/T209515 (10BBlack) Downtimes set, we shouldn't get cert alerts in icinga
[16:28:34] <wikibugs>	 10Traffic, 10Beta-Cluster-Infrastructure, 10DNS, 10Operations, and 4 others: Ferm's upstream Net::DNS Perl library questionable handling of NOERROR responses without records causing puppet errors when we try to @resolve AAAA in labs - https://phabricator.wikimedia.org/T153468 (10MoritzMuehlenhoff) Status u...
[16:32:29] <wikibugs>	 10Traffic, 10Beta-Cluster-Infrastructure, 10DNS, 10Operations, and 4 others: Ferm's upstream Net::DNS Perl library questionable handling of NOERROR responses without records causing puppet errors when we try to @resolve AAAA in labs - https://phabricator.wikimedia.org/T153468 (10Krenair) This was already a...