[10:16:45] 10Traffic, 10SRE: dbtree.wm.o stopped working after enforcing Puppet CA issued certs for ATS backend origin servers - https://phabricator.wikimedia.org/T282531 (10Vgutierrez) [10:18:06] 10Traffic, 10SRE: dbtree.wm.o stopped working after enforcing Puppet CA issued certs for ATS backend origin servers - https://phabricator.wikimedia.org/T282531 (10Vgutierrez) p:05Triage→03Medium dbtree.wikimedia.org is hosted on the same boxes as tendril and it's using the same certificate, tendril.wikimed... [10:18:13] 10Traffic, 10DBA, 10SRE: dbtree.wm.o stopped working after enforcing Puppet CA issued certs for ATS backend origin servers - https://phabricator.wikimedia.org/T282531 (10Marostegui) [13:36:28] 10HTTPS, 10Traffic, 10Cloud-VPS, 10SRE: certificate for Cloud VPS has expired - https://phabricator.wikimedia.org/T282102 (10Sascha) If it helps, feel free to adopt https://certmon.toolforge.org/ which was quickly thrown together in an attempt to help Wikimedia to improve its monitoring. See [[ https://git... [15:59:07] 10netops, 10SRE, 10ops-codfw: Multiple host down alerts from rack C2 - https://phabricator.wikimedia.org/T279457 (10Krinkle) [16:42:03] 10Traffic, 10Okapi [Wikimedia Enterprise]: "wikimedia.com" DNS transfer to Wikimedia Enterprise's AWS infra - https://phabricator.wikimedia.org/T281428 (10BBlack) [16:43:48] 10Traffic, 10Okapi [Wikimedia Enterprise]: "wikimedia.com" DNS transfer to Wikimedia Enterprise's AWS infra - https://phabricator.wikimedia.org/T281428 (10RBrounley_WMF) @Protsack.stephan, seems like the sequence of events is - written by @BBlack. When would be a good time to do this switchover? # Set up a... [16:44:14] 10Traffic, 10Okapi [Wikimedia Enterprise]: "wikimedia.com" DNS transfer to Wikimedia Enterprise's AWS infra - https://phabricator.wikimedia.org/T281428 (10RBrounley_WMF) p:05Triage→03Medium [16:55:48] 10Traffic, 10Okapi [Wikimedia Enterprise], 10SRE: "wikimedia.com" DNS transfer to Wikimedia Enterprise's AWS infra - https://phabricator.wikimedia.org/T281428 (10BBlack) A lot of what's in that zonefile of course will change for the new DNS setup, or is irrelevant to any smooth transition, etc. The key part...