[06:12:57] <jayme>	 swfrench-wmf: we considered automatically applying them in general and discarded that since it has the potential of breaking lot's of things. Just adding rules might be fine though
[13:49:28] <btullis>	 jayme: I have a question about the procedure here: https://wikitech.wikimedia.org/wiki/Kubernetes/Clusters/IPIP#Kubernetes_API_(control_plane) - It says...
[13:49:51] <btullis>	 > Verify the IPIP packages are be handled correctly by dry running the migrate-service-ipip on the `kubemaster` service.
[13:50:34] <btullis>	 So I dry-run the cookbook: `cookbook --dry-run sre.loadbalancer.migrate-service-ipip --dc codfw --alias dse-k8s-master-codfw kubemaster` 
[13:51:53] <btullis>	 It tells me to update `hieradata/common/service.yaml` before proceeding in dry-run mode. So I'm not sure how I actually "Verify the IPIP packages are be handled correctly..." 
[13:52:34] <jayme>	 btullis: ah..sorry...just pretend you have
[13:52:35] <btullis>	 Sorry if I'm being an idiot.
[13:52:49] <jayme>	 no, the cookbook is designed to be interactive
[13:53:11] <btullis>	 OK, thanks. I'll do that.
[13:54:12] <jayme>	 but there is another cookbook nowdays that doesn't try to be clever: sre.loadbalancer.check-ipip
[13:54:32] <jayme>	 you can try that instead (and maybe update the docs if it works for you)
[14:02:08] <btullis>	 OK, thanks. So I can run `sudo cookbook sre.loadbalancer.check-ipip --dc codfw --query A:dse-k8s-master-codfw kubemaster`(non-dry-run) before switching the entry in the service catalog and before running the migration cookbook for real. Is that correct?
[14:02:35] <jayme>	 yes
[14:05:20] <btullis>	 Nice one. Looks good. I'll proceed with the change to the service catalog and update the docs with this. Cheers.
[14:05:34] <jayme>	 cool, thanks!