[05:21:01] For the oncallers, I've depooled pc1: https://phabricator.wikimedia.org/T430478 [05:39:11] <_joe_> you've depooled all of pc1? [05:44:24] yeah, it is either ON/OFF [05:44:30] we have the other 7 sections serving fine [05:44:35] I will repool in a bit though [06:21:08] slyngs, jelto, (or anyone else): compromised dev account https://phabricator.wikimedia.org/T430477 [06:21:35] I'll let T&S know for the gerrit comment [06:27:54] Shoud on-call SREs take immediate action? I doesn't look like I have permissiones to block/unblock users in Bitu Identity Manager (from here https://wikitech.wikimedia.org/wiki/IDM/Account_Blocking) [06:29:30] slyngs might have permissions [06:30:32] Yup [06:31:44] RhinosF1 / jelto done [06:31:59] Thank you! [06:32:08] That's slyngs [06:32:11] Thanks* [06:32:36] should I delete the comment in Gerrit? [06:32:43] jelto: please [06:33:27] done [06:33:50] slyngs: is LDAP block still supposed to relay to Phab? [06:34:01] Oh I see why it didn't [06:34:04] It's not linked [06:34:07] I'll whack that [06:34:10] Thanks [06:34:26] Yeah, if we have the link, it will be blocked along with LDAP and Gerrit [06:36:32] We can probably close the task now unless anyone sees anything else to disable [06:37:14] That should be it, but we do have a lot of systems :-) [06:39:23] Ok thank you for raising this issue! I'll head back to breakfast then, please ping if anything else is needed immediately [06:40:22] Breakfast here too [06:45:20] indeed all seems covered