[09:50:41] <addshore>	 o/ Where can one find the latest deployed container images for various services these days? TLDR is I'm trying to find out what version of https://docker-registry.wikimedia.org//repos/data-engineering/eventgate-wikimedia/tags/ is actively used right now / if this image is actually used or if there is a different one for eventgate
[09:54:11] <Lucas_WMDE>	 addshore: my guess would’ve been deployment-charts but it looks like https://gerrit.wikimedia.org/g/operations/deployment-charts/+/5f57cf991e/charts/eventgate/values.yaml#92 isn’t pinned to a specific version
[09:54:17] * Lucas_WMDE might be misunderstanding a lot of things
[09:56:32] <addshore>	 i was confused when it wasnt just showing up in codesearch :D but yes, this already seems like the pointer I need, which si Im looking at and or usoing the wrong image :D
[09:57:19] <addshore>	 it changed here it seems https://gerrit.wikimedia.org/r/plugins/gitiles/operations/deployment-charts/+/6834d5331aaebccbb069f10d1e2250c2281c1be4%5E%21/#F1
[09:57:23] <addshore>	 Lucas_WMDE: tyvm
[10:01:16] <Lucas_WMDE>	 \o/
[10:39:43] <akosiaris>	 addshore, Lucas_WMDE: The currently deployed ones are in helmfile.d/services/<insert specific instance of service>. The ones under charts/<chart>/values.yaml are more dependent on the will of the developer of the chart to provide a sane default. 
[10:40:02] <Lucas_WMDE>	 ah, right
[10:40:19] <Lucas_WMDE>	 and that doesn’t specify the image: again (because the default is fine) which is why I didn’t find it with codesearch / git grep :)
[10:40:26] <Lucas_WMDE>	 thanks!
[10:40:28] <akosiaris>	 yw
[12:32:29] <dpogorzelski>	 what's the fastest way to move large files across 2 machines? afaik direct copy is not possible
[12:52:21] <volans>	 one option is https://wikitech.wikimedia.org/wiki/Transfer.py, the other could be setting up rsync for the affected hosts with puppet if that makes more sense, depending on the use case
[13:01:09] <dpogorzelski>	 it's a one off so i would avoid puppet
[13:30:02] <brouberol>	 I've been ask to gradually migrate https://mpic.wikimedia.org to https://test-kitchen.wikimedia.org. I've dealt with the ingress to tolerate both domains while the migration is ongoing. I was wondering: is it possible to perform an URL redirect at the ATS level, so that if you're requesting https://mpic.wikimedia.org/<path>, you're being redirected
[13:30:03] <brouberol>	 to https://test-kitchen.wikimedia.org/<path> ? 
[13:30:24] <brouberol>	 this way, the migration could be done smoothly even if users are not aware of it
[13:31:30] <taavi>	 brouberol: the mediawiki apache config is often used for that, https://gerrit.wikimedia.org/r/plugins/gitiles/operations/puppet/+/refs/heads/production/modules/mediawiki/files/apache/sites/redirects/redirects.dat
[13:33:21] <brouberol>	 TIL! How does this interact with ATS itself? Is that a config deployed on the same hosts?
[13:34:15] <taavi>	 ats sends requests to mediawiki if there's no other backend defined
[13:34:54] <brouberol>	 oh, so I'd need to set a redirect between mpic -> test-kitchen in that redirect.dat, _and_ remove mpic.wikimedia.org from the ATS mapping file, correct?
[13:38:53] <brouberol>	 would it entail a mediawiki redeploy as well?
[13:58:21] <akosiaris>	 no, it doesn't need a mediawiki deploy
[13:58:34] <akosiaris>	 however it will require the usual 30m of puppet convergence
[14:25:56] <duesen>	 akosiaris:  quick question about x-client-ip: can I rely on all external traffic to have that header? Would it be ok for the rest gateway to simply disable all rate limiting if x-client-ip is not set? 
[14:29:31] <akosiaris>	 duesen: X-Client-IP is indeed reset and forced on the CDN. If it is missing, it did not come from the CDN. 
[14:30:00] <akosiaris>	 reset => it can not be forged
[14:30:58] <akosiaris>	 Regarding the second question, I assume so. As far as I can understand we are not interested in rate limiting internal workloads. 
[14:40:33] <brouberol>	 akosiaris: thanks!
[14:53:45] <duesen>	 akosiaris: ok, thank you! that makes my life easier.
[14:53:48] <_joe_>	 taavi: do we still use redirects.dat for non canonical domains?
[14:53:56] <_joe_>	 I thought we moved those all to ncredir
[14:53:57] <brouberol>	 akosiaris: I took the liberty to add you as reviewer of https://gerrit.wikimedia.org/r/c/operations/puppet/+/1213489
[14:54:29] <_joe_>	 ah right under wikimedia.org sorry, scratch that
[14:54:38] <taavi>	 yep
[14:56:40] <akosiaris>	 brouberol: +1ed
[14:56:47] <brouberol>	 thanks!
[18:40:10] <tgr_>	 hi, can someone review a noop puppet patch? https://gerrit.wikimedia.org/r/c/operations/puppet/+/1213496
[18:40:38] <tgr_>	 I want to get rid of the Diffusion links on the top of https://noc.wikimedia.org/conf/ but Gitiles doesn't display the readme currently
[18:42:32] <sukhe>	 tgr_: done and merged.
[18:43:28] <tgr_>	 thx