[04:25:46] Hi, I've been trying to create a new tool in Toolforge with the name "frostlybot", but it's been giving me this error: "Tool name is already in use or invalid." [04:25:57] There's no other tools with that name so I'm not sure why its erroring [04:28:10] !help [04:28:10] If you don't get a response in 15-30 minutes, please email the cloud@ mailing list -- https://wikitech.wikimedia.org/wiki/Help:Cloud_Services_communication [04:34:41] Frostly: I don't immediately know why that's happening; do you happen to know if the issue is specific to that name or happens for creation of any tool? [04:36:24] * andrewbogott confirms that tool creation isn't totally broken [05:12:48] andrewbogott just happens for that name [05:17:16] Frosty, andrewbogott: I think this is the same problem as https://phabricator.wikimedia.org/T380384 [05:18:10] That's what I thought too but there isn't actually an SUL account with that name is there? https://meta.wikimedia.org/wiki/Special:CentralAuth/Frostlybot [05:18:48] Oh wait, there /is/ a https://meta.wikimedia.org/wiki/Special:CentralAuth/Frostybot though... [05:21:10] AntiSpoof might fire on that. The api doesn’t like it. https://toolsadmin.wikimedia.org/register/api/username/Frostlybot [05:21:38] Oh, it forbids things that are, like, similar but not the same as existing accounts? [05:22:57] Yeah. https://www.mediawiki.org/wiki/Extension:AntiSpoof [05:23:18] regardless, it looks like he near-term answer is to use a different name. Sorry, Frostly [05:24:00] andrewbogott okay, thanks for letting me know! [09:36:28] Hey, we're facing an outage in ISA tool. the campaigns page returns internal server error (500) https://isa.toolforge.org/campaigns. Is that a major outage for tools over "toolforge" ? [09:38:20] !help yesterday there was a problem regarding ISA tool also, the new campaigns created without images [09:38:21] If you don't get a response in 15-30 minutes, please email the cloud@ mailing list -- https://wikitech.wikimedia.org/wiki/Help:Cloud_Services_communication [09:39:57] nonn99: try restarting the tool, and see if that changes anything [10:26:34] the error for the ISA tool is; "Can't connect to MySQL server on 'tools-db-1' ([Errno 113] No route to host)" [10:26:57] it's trying to connect to the old instance of the db, restarting should fix it unless there's an hardcoded ip/hostname [10:29:12] yep it's hardcoded in src/isa/config.yaml [10:29:54] I'll open a phab task in the "isa" project for the maintainers to fix that [10:44:04] T380962 [10:44:05] T380962: Worker fails to connect to the database - https://phabricator.wikimedia.org/T380962 [15:58:46] !log lucaswerkmeister@tools-bastion-13 tools.codex-playground deployed 812c758510 (Codex 1.17.0) [15:58:48] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.codex-playground/SAL [18:25:23] following the departure of fastily from wmf projects, are there any alternatives, preferably on xtools, for ftools ip-range-calc, previously located at https://ftools.toolforge.org/general/ip-range-calc.html? [18:26:41] !log tools kubectl sudo rollout restart -n kube-system deployment coredns # update resolv.conf in coredns containers [18:26:44] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [18:33:37] https://nativeforeigner.com/calc/ or https://en.wikipedia.org/wiki/Template:IP_range_calculator ? [20:39:33] Hi, Is there any way to reactivate the OAuth app? My app is disabled. Now, when I am doing "Reset the secret key to a new value". It is saying "You are not allowed to execute the action you have requested.". [20:40:12] ping: lucaswerkmeister [20:44:32] Jayprakash12345: can you not just create a new one [20:44:35] Jayprakash12345: If you mean https://meta.wikimedia.org/wiki/Special:OAuthListConsumers/view/7a0eacac36b5e6fc7a6a53d220d0c847, there no mechanism for you to change the disabled state. You instead need to request a new grant. [20:47:54] I can create new but we used the 7a0eacac36b5e6fc7a6a53d220d0c847 to gather the stats, I mean number of edit done by app. If we have to change this then I have to rework on those to use new app. [20:48:48] there is no system for regenerating a leaked key securely [20:49:43] our entire OAuth management system is built on the idea that creating a new grant is the way to change things [20:50:29] bd808: What if someone activates and I reset the secret value just now within 1 min. Becasue consumer key is already public for all tools. The only issue is the secret which I can reset now If someone can activate it for a while. [20:50:40] no [20:53:25] Okay, creating new one. [20:56:24] bd808: Hi, I have applied for a new one here https://meta.wikimedia.org/wiki/Special:OAuthListConsumers/view/02c09a3cf66f97e052620e4155c8fae6. Can you look into the request? [20:57:15] Jayprakash12345: {{Done}} [20:57:53] Jayprakash12345: The database credentials for that tool have just been rotated too. [20:59:06] Thank you so much, Bryan. So, now I have to only change the OAuth in my webapp? [21:03:06] Jayprakash12345: you’ll also have to update your SQLALCHEMY_DATABASE_URI, I believe [21:03:42] or update the code so that it will read the ~/replica.my.cnf file, where the new credentials ended up [21:03:48] but I don’t know if sqlalchemy makes that easy or not [21:05:22] (or use the TOOL_TOOLSDB_USER and TOOL_TOOLSDB_PASSWORD environment variables – I think those should also be set automatically already) [21:09:00] Thanks lucaswerkmeister, I have update the config file to use new SQLALCHEMY_DATABASE_URI. [21:10:23] echi $TOOL_TOOLSDB_USER seems, empty result. And there is no env key with name TOOL_TOOLSDB_USER on `env` command output. [21:10:30] echo* [21:12:06] !help sorry, am I able to get help for the question I asked in the channel at 18:25:10? [21:12:06] If you don't get a response in 15-30 minutes, please email the cloud@ mailing list -- https://wikitech.wikimedia.org/wiki/Help:Cloud_Services_communication [21:14:29] I responded minutes after you asked [21:15:30] Jayprakash12345: did you check `toolforge envvars list`? [21:15:51] (IIUC the environment variables won’t be set in your login shell on the bastion, but when the tool runs as a webservice they should be set) [21:19:24] (in `webservice shell` they should also be set) [21:28:13] Yes lucaswerkmeister. It is there inside the webservice shell. [21:29:42] JJMC89: sorry! Saw the logging and thought it wasn't noticed. Having a slow day today. [21:30:09] and that's perfect, thanks! [21:31:56] Jayprakash12345: ok! it’s up to you whether you want to use it, but that way you wouldn’t have to change any other config whenever the password is changed again :) [21:43:46] +1 for envvars being the currently best method for handling database passwords [21:44:32] Thanks bd808 lucaswerkmeister. I will update the code to use the envvars.