[10:50:35] sukhe: https://gerrit.wikimedia.org/r/c/operations/puppet/+/645113 [16:43:40] jbond42: where can I follow along with the puppet upgrades? [16:54:03] andrewbogott: for now i have only upgraded the puppetmasters/puppetdb servers, i will update https://phabricator.wikimedia.org/T265139 as i progress, however this should be minimal impact as its only a minor point releases [16:54:16] 'k [16:54:32] is there equivalent work that needs to happen in cloud-vps? [16:55:10] andrewbogott: once th packages have been added to apt and upgraded in production you should be able to safley just run `apt-get install puppet` [16:55:30] `apt-get install puppet-master-passanger` (on puppet masters) [16:57:16] jbond42: you disabled all the clients during your upgrade, will I want to do that on my clients as well? [16:57:58] andrewbogott: thanks for the reminder i need to reneable that :) [16:59:04] but to answer your questions no. the only reason i disab;led it on production is because i needed to restart apache on the puppetmasters which can cause a lot of tempral puppet faliures. as such its simpler to disable puppet fleet wide to reduce noise [16:59:31] * andrewbogott nods [17:13:38] effie: I'm planning to rebuild the wikitech servers with Buster soon. Is there any reason to think that mediawiki won't just work on Buster? (It seems fine on my test host, https://labtestwikitech.wikimedia.org/wiki/Main_Page ) [17:14:02] andrewbogott: I am off :)\ [17:14:38] just working on some leftovers I have to finish [17:16:34] but do write on the task, and we can pick up on January [17:17:10] I'm going to do it today unless you tell me I shouldn't :) [17:21:51] I do not think there is such a rush [17:22:15] I think it can wait for January along with the production servers [17:22:19] ok [17:22:29] cheers:) [17:22:51] have a good break! [17:23:15] there's some sort of syncing of content to consider, maybe some little thing in there that's different [17:23:20] so might as well not rush it [17:24:30] yeah, +1 to not doing that this week while a lot of folks are out [18:59:18] gilles: I want to see haproxy logs on kibana so I added https://gerrit.wikimedia.org/r/c/operations/puppet/+/651187/1/modules/profile/files/rsyslog/lookup_table_output.json — is there any security concern with that taking effect for all haproxy users? (Your work already feeds it into rsyslog so I'm guessing that discussion has already happened)