[00:46:52] you all don't love writing man pages in groff format? [06:49:50] <_joe_> legoktm: that will not be dignified with an answer [06:56:32] s/f/s/g ;) [08:03:49] volans: dignisied? [08:06:08] ema: no, I was referring to 'groff' in lego's message ;) [08:06:21] ah! [08:06:33] I'm glad I asked, this would have kept me busy for a while otherwise [08:06:38] ahahah [08:06:55] ema: this is why it's important to regularly express yourself. ;) [08:06:58] yeah wasn't that clear I have to admit [08:32:57] <_joe_> yeah took me a few secs too [08:34:37] or a sew secs? [08:37:06] XioNoX: ha [09:44:01] how are we still stuck with nroff and troff decades later anyways? [10:42:01] this I think is an interesting read for sres, and 100% relevant to us: https://github.blog/2020-07-08-introducing-the-github-availability-report/ [10:45:37] volans: how.. do i grant someone access to ssh into one of my cloud VPSes? [10:45:51] i can't even figure out how _i_ can log into it [10:46:04] kormat: familiar with horizon? [10:46:18] jynus: a little, unwillingly [10:48:17] actually, I don't think there is per-instance granularity, only per project [10:50:32] ahhh. AuthorizedKeysCommand /usr/sbin/ssh-key-ldap-lookup [10:50:35] never seen that before [10:51:04] but maybe you can play with sudo & groups, not sure what you want to achieve [10:51:37] jynus: i want to allow marostegui to ssh into a vps [10:51:46] which project? [10:51:52] automation-framework [10:52:01] is the only way to add him to the project? [10:54:25] for a global root I think people is quite generous with access [10:54:32] with reason [10:54:45] jynus: i don't see a way to do per-instance access v0v [10:54:46] not sure if you are admin if not I can in a bit or any admin in the projecr in horizon can [10:54:52] volans: ok, done. what needs to happen now? [10:55:14] I can access now [10:55:16] Thanks guys [10:55:23] crazy black magic [10:55:35] so the granularity I meant was only if you wanted to give manuel only some rights [10:55:43] but I think won't be needed? [11:17:39] hi all, have now migrated puppet production environment to using hiera version 5. This should caus no observable difference however if you see anything strange involving hiera please ping [11:57:08] <_joe_> jbond42: \o/ [11:57:18] <_joe_> now we can seriously talk about environments imho [11:59:45] yep, we can also support in module hiera defaults, although i dont know if thats something people want [12:00:15] is there a changelog I can understand? :) [12:04:20] XioNoX: _you_? no. ;) [12:04:30] XioNoX: im not sure tbh, hiera 3 use to be a standalone gem but hiera5 is now part of puppet so i dont think a simple changelog exists. At a high level there is not much functional difference. however there are some minor difference for instance im pretty sure you can now define an undef default in hiera using `module::param: ~`. [12:05:44] well, that's good, one less thing for me to care about :) [12:06:31] most of the difference are related to low level api design for instance compare git/puppet/modules/wmflib/lib/hiera/backend/nuyaml3_backend.rb with modules/wmflib/lib/puppet/functions/wmflib/expand_path.rb [12:07:07] but yes you should be able to pretty muchy continue using things as is and as joe mentioned it opens up some new designes/functionality which we could start to make use of [12:07:30] however wmcs would need to also migrate to hiera5 before we can serioulsy consider that [12:07:58] probably/maybe ... [12:34:56] jbond42: zero-prio, let's remember to update the onboarding chat slides ;) [12:38:28] volans: ack will do [12:39:31] thx :) [16:17:48] XioNoX, jclark-ctr, cmjohnson1, I'm reviewing the switch/ceph/cloudvirt tickets and can't tell where we're at. Are they just awaiting physical cabling? Or are some of them already up and ready for OS install? [16:19:14] andrewbogott: from LLDP some servers are cabled, they need to be put in the proper vlan (defined in my comment) and then they should be able to be installed [16:19:24] They’re in need of a couple of things. I’m working on them [16:19:45] is 'put in the proper vlan' a dcops thing or an arzhel thing? [16:20:04] oh, nice — thanks cmjohnson1 [16:20:22] dcops, but as they're new vlans, they might need my help [16:21:01] dcops thing. Your cephosd servers will be ready today or first thing tomorrow barring any odd issues that pop up. [16:21:09] woo!