[07:14:07] !log tools uncordon tools-k8s-worker-nfs-53 after failed cookbook (?) yesterday [07:14:10] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [07:28:53] Unrelated info: in 2 minutes, Free online workshop about Zabbix Monitoring Tool by Wikimedia Switzerland - https://nextcloud.wikimedia.ch/apps/bbb/b/7BW5wxttR2kKdfyQ [08:30:41] ^ last msg about this - workshop recording is here: [08:30:42] https://recording.wikimedia.ch/playback/presentation/2.3/11fe7a14329a0a4a87134d72213dc798e46e0c8d-1757662289995 [08:33:55] !log tools pointing dev.toolforge.org to tools-bastion-14 T392510 [08:34:00] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [08:34:00] T392510: Upgrade Toolforge bastions to Trixie and enable IPv6 - https://phabricator.wikimedia.org/T392510 [08:40:56] !log bastion point secondary.bastion.wmcloud.org to bastion-eqiad1-6 T392689 [08:41:00] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Bastion/SAL [08:41:00] T392689: Refresh Cloud VPS bastions to run on Trixie and enable IPv6 - https://phabricator.wikimedia.org/T392689 [08:45:05] It seems that beta.wmflabs.org wikis are down. [08:47:49] beta cluster issues are more often than not handled in #wikimedia-releng, although they do load for me [08:49:41] !log tools pointing login.toolforge.org to tools-bastion-15 T392510 [08:49:45] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [08:49:46] T392510: Upgrade Toolforge bastions to Trixie and enable IPv6 - https://phabricator.wikimedia.org/T392510 [08:59:37] !log bastion point primary.bastion.wmcloud.org to bastion-eqiad1-5 T392689 [08:59:41] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Bastion/SAL [08:59:41] T392689: Refresh Cloud VPS bastions to run on Trixie and enable IPv6 - https://phabricator.wikimedia.org/T392689 [09:21:52] so we now have a buster bastion, a trixie bastion, and now bullseye nor bookworm in between? ^^ [09:21:55] (on toolforge, that is) [09:24:26] ideally the buster bastion would also not be there. but yes, as soon as the bookworm bastions are shut down, hopefully some time next week [12:16:21] I wonder if we should notify somewhere every time the SSH fingerprints change. My terminal goes crazy every time this happens. [12:17:29] is the cloud-announce mailing list not "somewhere"? https://lists.wikimedia.org/hyperkitty/list/cloud-announce@lists.wikimedia.org/thread/I4M335NMS6CT23AT23P5PL4N3NUI2YMT/ [12:18:40] you could also add the fingerprint pages on wikitech to your watchlist (that’s how I found out first ^^) [12:30:50] taavi: Yeah... I didnt notice. hahahahahaha [13:28:04] o/ unsure if it's only me but I have the impression that gerrit is much slower since the new bastion is in place [13:29:51] dcausse: I might be missing something but why does the toolforge or cloud vps bastions have anything to do with how you access gerrit? [13:31:44] taavi: hm.. I've been routing gerrit.wikimdia.org to wmflags/wmcloud bastion forever... [13:34:50] !log bastion an allow-all ipv6 egress rule in bastion default security group [13:34:53] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Bastion/SAL [13:35:07] dcausse: I would just connect to gerrit directly, but ^ might have had something to do with that [13:35:31] taavi: thanks [15:30:01] dcausse: please do not use WMCS as a jump host for accessing gerrit. That is using WMCS as a VPN. [15:32:21] bd808: sure just changed this couple hours ago, not sure how I ended with this config tbh but somehow I've been assuming that was the right way... [15:33:15] it's easy to mess up SSH configs... :D [15:34:08] indeed! looking at what I had I'm sure I wanted to be a bit too smart... [15:35:04] I could totally see it having been a workaround at some time for some hotel or conference wifi that blocked the random gerrit ssh port too. [15:51:06] heh