[15:09:31] !log admin rebooted cloudinfra-cloudvps-puppetserver-1, it's so busy that it's unresponsive [15:09:35] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL [16:15:34] Hi, we have a vps project called catalyst-dev and we'd like to be able to put subdomains on catalyst-dev.wmcloud.org. Can someone enable that on the project for us? [16:22:34] jeena: do you have floating IPs in the project, or are you planning to set up web proxies there? [16:22:51] just web proxies [16:23:07] we need to make a wildcard proxy for a subdomain on the project [16:23:44] ok. I don't know for sure that wildcards are supported; taavi is the expert but he's likely out. Can you create a phab ticket and link here? I'll need to do a bit of research. [16:24:05] we have them on our other projects but I can make a task [16:24:40] jeena: I think I remember where it needs to be enabled, but please make a task anyway :) [16:24:54] 👍 [16:27:22] dhinus: andrewbogott https://phabricator.wikimedia.org/T381508 [16:27:41] dhinus: FYI https://wikitech.wikimedia.org/wiki/Portal:Cloud_VPS/Admin/Web_proxy#Enable_per-project_subdomain_delegation [16:27:56] thx, dhinus will you take care of it? [16:33:16] andrewbogott: yes, please assign the task to me [16:33:29] thank you! [16:33:36] I'll claim it :) [16:33:51] Thank you! [17:46:38] !log tools rebooting tools-legacy-redirector-2, many probes failing [17:46:41] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [17:48:15] !log bd808@tools-bastion-12 tools.stashbot Moved fediverse posting to https://wikimedia.social/@sal (T378571) [17:48:19] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stashbot/SAL [18:01:52] <$MAJOR> ❗️❗️❗️❗️❗️❗️❗️ [18:01:54] <$MAJOR> ⭐️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️ 💰 [18:01:55] <$MAJOR> 🪙❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️ [18:01:57] <$MAJOR> ❗️❗️❗️❗️ [18:01:58] <$MAJOR> ⭐️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️🪙 [18:02:00] <$MAJOR> ⭐️❗️❗️❗️🪙❗️❗️❗️❗️❗️❗️❗️❗️❗️ [18:02:01] <$MAJOR> ❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️❗️ [18:02:03] <$MAJOR> ⭐️ *@MAJORAIRDROPMBOT* ⭐️ [18:02:04] <$MAJOR> ⭐️*@MAJORAIRDROPMBOT* ⭐️ [18:17:38] Thanks for the cleanup @jhsoby [18:17:50] 🤟 [18:23:20] Can I kick wm-bb spammers from here, or only if I'm using bridgebot myself? [18:25:46] andrewbogott: you have to be on the Telegram side to kick out a Telegram spammer [18:25:59] ok, I figured [18:26:52] I'm asking for the second time, does anyone know why I can't add cname records to DNS? [18:26:56] (I mean, you could always kick wm-bb itself, but that might be considered overkill :P ) [18:27:03] andrewbogott: you now have the admin bit on the Telegram channel if you end up needing it [18:28:34] dyepezg: what username, Cloud VPS project, and CNAME? [18:28:52] And what if any error message are you getting [18:28:55] dyepezg: and also, what happens when you try? [18:29:19] danielyepezgarces, wikipeoplestats, *.wikipeoplestats.wmcloud.org [18:30:15] https://usercontent.irccloud-cdn.com/file/uGPfOVCL/image.png [18:30:27] try *.wikipeoplestats.wmcloud.org. with a terminating . ? [18:31:32] yeah don't work [18:31:33] dyepezg: Mostly curious, what are you going to point that wildcard CNAME at? [18:32:17] Main domain [18:32:53] Sorry, I don't understand that response. [18:33:15] dyepezg: I was able to create a cname in your project, does it look like what you wanted? [18:33:22] If so we still have a mystery but a different one :) [18:34:16] Exactly, it just didn't let me :') [18:34:53] ok, I'm going to delete mine and have you try again. Can you take a screenshot of the dialogue before you submit? [18:34:57] and I'll also watch the logs. [18:35:33] ok wait [18:37:59] Only show the alert https://usercontent.irccloud-cdn.com/file/9PyrYJdM/image.png [18:38:53] I think the proxy doesn't detect it [18:39:27] https://en.wikipeoplestats.wmcloud.org https://usercontent.irccloud-cdn.com/file/svcBpua9/image.png [18:39:58] dyepezg: I was hoping to see what you enter in the 'create record set' dialog box [18:40:23] oohh [18:40:27] dyepezg: I think we are pretty deep in XY Problem land here. What is your goal? Your project has no compute instances so there isn't anything for you to point a HTTP proxy at. [18:40:39] I'm also not sure that a cname will work for a different proxy name, since the proxy server looks at the url the user typed to determine the backend. [18:41:02] So if the user types 'whatsis.wikipeoplestats.wmcloud.org' there will definitely not be a proxy there unless it was configured [18:41:11] and configuring it would eliminate the value of the wildcard [18:41:12] yeah my instance is wikipeoplestats-prod01 [18:41:39] * bd808 realiizes he had a confusing filter in the UI [18:41:51] * andrewbogott did too, coincidentally [18:41:59] * andrewbogott thinks that filter should clear when switching projects [18:43:20] dyepezg: Ok, so you have https://wikipeoplestats.wmcloud.org setup. And you are hoping to make *.wikipeoplestats.wmcloud.org (e.g https://foobar.wikipeoplestats.wmcloud.org) redirect there? [18:44:12] Well, I explained that I want to have a subdomain for each wiki to make the URLs more user-friendly [18:44:49] Sorry I have not seen your explanations in my scrollback. [18:47:27] I think this is possible, but I don't think it is at all self service. It needs this stuff: https://wikitech.wikimedia.org/wiki/Portal:Cloud_VPS/Admin/Web_proxy#Enable_per-project_subdomain_delegation [18:48:14] Setting up a wildcard CNAME might kind of work, but it won't have proper TLS certs [18:50:30] Once the domain is setup for use with the front proxy then https://wikitech.wikimedia.org/wiki/Help:Using_a_web_proxy_to_reach_Cloud_VPS_servers_from_the_internet#wmcloud.org_zone_delegations says that a "*" proxy can be created. [18:53:51] I was left looking like a clown reading the documentation. I don't know how to use Puppet :D [18:54:15] The admin docs are for folks like andrewbogott and I. [18:54:44] Your ability would be writing a Phabricator task explaining your goals and how we can help. [18:55:16] ooh ok [18:56:14] Although my idea is to have a vanity with a CNAME so as not to make very long subdomains [18:56:45] that also requires a phab task and discussion [18:57:41] ok [19:01:10] dyepezg: it would be nice if your backend used our local privacy protecting CDN services -- https://wikitech.wikimedia.org/wiki/Help:Toolforge/Web#Load_external_assets_using_our_CDN_services -- rather than trying to load css and js from external CDN websites that will then know the IP address of your visitors. [19:01:51] ok i will change it later [19:02:16] At the moment the site is in the development stage [21:08:40] *nudge* could anyone look at this ticket today? We are a little blocked on a setting up a test environment for experimentation. https://phabricator.wikimedia.org/T381508 [22:58:00] ugh. stuck in the infinite redirect loop failure mode of auth to horizon.wikimedia.org [22:59:56] doing a logout at idp.wikimedia.org and then trying again seems to have fixed it this time. [23:07:04] kindrobot: {{done}}