[06:29:55] 06Traffic, 10Hiddenparma, 13Patch-For-Review: Introduce known-client identity objects and integrate with requestctl - https://phabricator.wikimedia.org/T403220#11577431 (10Joe) Hi @Scott_French, I assume this task is resolved? [06:31:34] 06Traffic, 10Hiddenparma, 06SRE, 13Patch-For-Review: Browser behaviour detection at the edge - https://phabricator.wikimedia.org/T400270#11577438 (10Joe) 05Open→03Resolved [06:35:48] 06Traffic, 10Hiddenparma: Introduce allowlists into the CDN (text) filtering - https://phabricator.wikimedia.org/T399057#11577444 (10Joe) 05Open→03Resolved a:03Joe [06:39:29] 06Traffic, 10conftool, 10Hiddenparma: Create a "trusted bot" stanza from requestctl we can use to bypass other rules - https://phabricator.wikimedia.org/T385149#11577459 (10Joe) 05Open→03Resolved a:03Joe [13:35:42] 06Traffic, 06Security-Team, 10WMF-General-or-Unknown, 07ContentSecurityPolicy, 13Patch-For-Review: Add restrictive CSP to upload.wikimedia.org - https://phabricator.wikimedia.org/T117618#11578577 (10TheDJ) Example file: https://test.wikipedia.org/wiki/File:18KOZ.pdf https://upload.wikimedia.org/wikipedia... [13:50:53] sukhe: hello! can we deploy https://gerrit.wikimedia.org/r/c/operations/dns/+/1228996 and https://gerrit.wikimedia.org/r/c/operations/puppet/+/1218784 ? [13:53:30] 06Traffic, 06Security-Team, 10WMF-General-or-Unknown, 07ContentSecurityPolicy, 13Patch-For-Review: Add restrictive CSP to upload.wikimedia.org - https://phabricator.wikimedia.org/T117618#11578659 (10Bawolff) Note that the version of the header prefixed with an `x-` is only needed for browsers from before... [14:27:00] XioNoX: hello! [14:27:08] perfect day for a deploy, topranks is on on-call I heard [14:27:46] let's do it -- let me know if you want me to press the buttons. and we should let Matthew know as well probably [14:28:10] great stuff :) [14:33:32] topranks: want to do the v6 deploy today given the above is not happening? :) [14:33:44] following up post-offsite: [14:34:27] @fabfur and @vgutierrez just a heads up that our instrument is sampling 100% on eswiki and ptwiki starting Jan 30th around 4:00 UTC. So you can look at instrumentation starting then. [14:34:42] sukhe: yep sure [14:34:50] ok [14:35:27] sukhe: is the netmask thing fixed? [14:35:34] topranks: yep [14:35:51] awesome :) [14:36:04] basically https://phabricator.wikimedia.org/T81605#11545350 [14:36:59] topranks: ok, I guess you will do a release first and then I can get started on my end. (https://gerrit.wikimedia.org/r/c/operations/software/homer/deploy/+/1229629 needs a revert) [14:37:50] ok cool [14:38:13] I need to go to pharmacy right now, let’s take a look at the top of the hour if you’re free then? [14:40:12] no worries! whenver you are available [15:06:29] 06Traffic, 10Hiddenparma, 13Patch-For-Review: Introduce known-client identity objects and integrate with requestctl - https://phabricator.wikimedia.org/T403220#11578973 (10Scott_French) 05Open→03Resolved Yes, I believe we can mark this resolved, now that the feature is in wider use and seems to be wo... [15:30:48] 10netops, 06Infrastructure-Foundations, 10Observability-Metrics: gNMIc: investigate new "collector" command - https://phabricator.wikimedia.org/T416360 (10ayounsi) 03NEW [17:31:05] 06Traffic, 10Maps, 06SRE, 07affects-Kiwix-and-openZIM: On using Wikimedia Maps to build Kiwix Openstreetmap ZIMs - https://phabricator.wikimedia.org/T416374#11579842 (10Aklapper) Hi, please follow https://wikitech.wikimedia.org/wiki/Maps/External_usage and fill out the linked form - thanks! [19:58:00] 10netops, 06Infrastructure-Foundations, 06SRE: Cookbook sre.hosts.reimage: DHCP snippet created with old IP when --move-vlan is used - https://phabricator.wikimedia.org/T416401 (10cmooney) 03NEW p:05Triage→03Medium [23:41:32] 06Traffic, 06collaboration-services, 10Gerrit, 06Release-Engineering-Team (Radar): Separate Gerrit https and ssh/git hostnames - https://phabricator.wikimedia.org/T394271#11581341 (10Dzahn) So.. meanwhile Gerrit is available behind the CDN (T365259) which was implemented in T411895 and is using the new [ht... [23:41:43] 06Traffic, 06collaboration-services, 10Gerrit, 06Release-Engineering-Team (Radar): Separate Gerrit https and ssh/git hostnames - https://phabricator.wikimedia.org/T394271#11581343 (10Dzahn) 05Stalled→03Open [23:57:34] 06Traffic, 06collaboration-services, 10Gerrit, 06Release-Engineering-Team (Radar): Separate Gerrit https and ssh/git hostnames - https://phabricator.wikimedia.org/T394271#11581366 (10thcipriani) 05Open→03Declined >>! In T394271#11581341, @Dzahn wrote: > So.. meanwhile Gerrit is available behind the...