[08:56:39] <elukey>	 hey folks, I/F created a new plan for the discovery intermediate cert changes: https://phabricator.wikimedia.org/T420993#11832725
[08:56:56] <elukey>	 so the idea is to simply create a new intermediate, and gradually move clusters over
[08:57:10] <elukey>	 so we avoid an upgrade day, it is simply too dangerous 
[08:57:22] <elukey>	 lemme know if I missed anything and/or if you foresee issues on the k8s side
[18:53:08] <cdanis>	 do we already install any kubectl plugins in production?
[18:53:41] <cdanis>	 I'd like to use https://github.com/brianpursley/kubectl-wait-job
[18:55:47] <cdanis>	 aha modules/kubeadm/files/kubectl-sudo.sh
[19:36:18] <cdanis>	 oh, that's the toolforge k8s, isn't it
[19:38:14] <taavi>	 cdanis: yes but I don't think anything prevents you from using the same approach elsewhere
[19:38:21] <cdanis>	 for sure