[07:57:16] _joe_: thanks for your work on https://wikitech.wikimedia.org/wiki/LVS#Add_a_new_load_balanced_service I made a bunch of cleanups and edits (although I'm not fully confident in all of them) [07:57:25] a pass from someone else would also be appreciated :) [09:56:43] moritzm: : I was checking 3XX status codes, and I wonder if we could mark a "redirect for authentication" with a 302 or a 303 for easy monitoring [09:59:02] google uses 302 for example [09:59:43] what I don't know is if check_http supports checking Location headers [10:11:24] it does, option -d, so I can have a check ready when you are done [10:12:10] I'll get back to you in a bit when done with CAS for tendril [13:21:11] if you don't like the smokeping spam, I'm looking for reviewers for https://gerrit.wikimedia.org/r/c/operations/puppet/+/574741 [13:23:00] although, is is only esams, or also a dns host? [13:23:26] yep, also dns1002 [13:27:51] that's expected I believe [13:28:04] s/expected/temporary/ [13:28:32] hopefully esams is also temporary ;P [13:29:06] 🤞 [15:49:58] 👋 [16:18:37] cdanis: you can now add CAS/SSO to your people site via htaccess https://wikitech.wikimedia.org/wiki/People.wikimedia.org#How_To_add_SSO_Authentication [16:21:32] <_joe_> jbond42: oh nice [16:23:24] thanks :-), hopefully got it out before cda.nis created a new lvs site for the sre timezone map [16:25:22] wait until he re-builds maps from scratch to properly display the SRE timezone data! [16:26:45] :D lol [16:27:09] "map rasterizer? hold my beer" [16:28:11] r/switcharoo [16:29:06] good point, why have we been calling it a switchover? obviously it's the old data center switcharoo [16:29:11] (hold my eqiad, I'm going in) [16:37:15] switchover on a good day [16:37:21] failover on a bad day :-D [16:39:02] we should call it a 'win-over' instead [16:39:34] the old data center win-aroo [17:41:57] +1 to win-aroo and/or switcharoo [17:43:38] and append a "o" each time it's successful or a "r" each time there is an issue [17:44:40] ah, that must be why when it's mostly successful, but with an issue, we call that "ro mode" [17:45:11] lol [18:18:31] The pun game is pretty strong in here today ;) [18:29:40] * apergos checks in... and checks right back out :-P [19:05:40] ro ro ro your data center? [19:07:01] ruh-roh... [20:12:44] * mutante googles stuff about RSA certs - gets "Find out if you or your staff need responsible service of alcohol (RSA) training " ;p [20:13:45] did you find out? [20:14:53] lol, did now. it's about Queensland, Australia. "If you cannot find your RSA certificate and need to have it re-issued, contact the registered training organisation (RTO) that originally issued your Statement of Attainment in Provide Responsible Service of Alcohol. " [20:15:15] they even have certificates, that's why [20:34:18] apt.wikimedia.org went ECDSA-only, removed RSA cert from the config. to support nginx on buster (without having to maintain custom version we had on jessie/stretch). so unblocks upgrading/replacing jessie install* and side-effect is slightly reduced back-compat for clients. So if you see Windows XP or Firefox < 2.0 users complain they can't use apt.wikimedia.org we are sorry [21:20:54] an Icinga change has been merged that added missing $contact_groups parameter in base checks. The big change is that now all cloud*/labs* machines actually have wmcs-team as contact group and NOT "admins" (us) anymore. https://gerrit.wikimedia.org/r/c/operations/puppet/+/574822 [21:21:29] a side-effect (kind of a fixed bug) is that also wdqs machines now get "wdqs-admins" and restbase machines get "team-services" [21:21:41] but as opposed to the wmcs case that is _in addition_ to "admins" [21:22:13] that part is "should have worked all the time but did not until now" to me