[08:24:04] what exactly is puppet:///volatile? I'm trying to update deployment-prep logstash but it fails to read puppet:///volatile/logstash/plugins/logstash-output-statsd-3.2.0.zip, I haven't found any docs on where that is supposed to be coming and deployment-puppetmaster04:/var/lib/puppet/volatile does not have anything logstash related in it [08:27:07] Majavah: volatile is a place where to store large files that wouldn't belong well into the puppet repo. For example in production we have the base debian images there. [08:27:51] and that file you mention too, fwiw [08:28:23] cc godog that might know more about that one specifically [08:32:34] yeah looks like the plugins for elk7 go through volatile, per https://gerrit.wikimedia.org/r/c/operations/puppet/+/548880 [08:35:09] where did the file originally come from? ie how can I have it from deployment-prep too? [08:37:20] Majavah: looks like from logstash 'prepare-offline-pack', I'll put the file on my home on the beta puppet server to unblock you (thanks for working on this!) [08:37:33] that's all the time I have for this for now though [08:38:54] Majavah: file is in my home on deployment-puppetmaster04 [08:39:03] thanks! [08:40:04] np! [12:34:51] jbond42: sorry I keep finding more edge cases with cfssl, turns out it can't issue wildcard certificates T282930 [12:34:53] T282930: cfssl: Support wildcard certs with envoy - https://phabricator.wikimedia.org/T282930 [12:37:25] Majavah: ahh yes, let me take a look should be a quick fix [12:52:22] I added the hiera back so deployment-mediawiki11 is now trying to get wildcard certs [12:55:35] Majavah: just about to jump into a meeting but i thik https://gerrit.wikimedia.org/r/c/operations/puppet/+/692316 is the fix if you want to cherry-pick [12:55:50] thank you! I'll test on deployment-prep and report back [12:55:57] great thanks [13:07:11] jbond42: had to fix a typo, otherwise working. please merge https://gerrit.wikimedia.org/r/c/operations/puppet/+/692318/ too now that it works [13:10:55] Majavah: great thanks will take a look and mere after this meeting [13:17:40] what's the status of having ats trust cfssl certs? was that done already or not? [13:29:13] 🤦‍♀️ db1131 is failing to boot off the network. reason? it's mac address doesn't match the one in puppet [13:30:08] nice.... [13:55:26] Majavah: both of those are merged [18:25:29] marostegui: ping when you're around [18:25:35] (for purging playing)