[13:07:04] jbond42: really nice to see how easy profile::pki::get_cert looks :) https://gerrit.wikimedia.org/r/c/operations/puppet/+/688953/5/modules/profile/manifests/tendril/webserver.pp#44 [13:10:16] thanks cdanis its also supper easy to switch services that are using P:tlsproxy::envoy https://gerrit.wikimedia.org/r/c/operations/puppet/+/685576/4/hieradata/role/common/debmonitor/server.yaml [13:10:25] nice :) [14:26:09] <_joe_> jbond42: now we just need to find the best way to integrate it in kubernetes :) [14:27:37] hi all, i update the I/F page (https://wikitech.wikimedia.org/wiki/Infrastructure_Foundations) with something kind of reprsenting a service catalouge. The idea is that we will easly be able to see who the owners are, what the commitments are (SLO's) and the minimim level of knowlage required for oncall (checklists). there is lots of stuff missing including most the links and im not [14:27:43] stuck to the format, more just wanted to ... [14:27:46] ... get something started [14:28:43] _joe_: indeed :), feel free to add me to any tasks where it may be usefull to start thinking about/testing this [14:33:15] <_joe_> jbond42: yeah I need to find the mental space for it [14:33:59] _joe_: ack sure, although feel free to add me early even if its just brain dumping :) [14:34:02] <_joe_> but right now we'll be looking at a very rudimentary implementation, nothing integrated in kubernetes tbh, although I am pondering if we shouldn't start to go in that direction