[01:21:52] 10Traffic, 10Operations, 10Performance-Team (Radar): Decrease max object TTL in varnishes - https://phabricator.wikimedia.org/T124954 (10Krinkle) [03:08:26] eqsin: cp5005.mgmt and cr1-re0 on mgmt both are still red, but rest of mgmt network looks fine, and real network looks ok [03:26:03] oh duh, it's all the mgmt [03:26:26] either way, redundant power seems to be back on the servers themselves [03:26:36] maybe mgmt switch needs a kick of some kind [16:55:49] 10Traffic, 10Certcentral, 10Operations: Integrate certspotter with certcentral to avoid certspotter notifying us on legitimate certs generated by our certcentral boxes - https://phabricator.wikimedia.org/T204994 (10Krenair) [16:57:20] 10Traffic, 10Certcentral, 10Operations, 10Goal, 10Patch-For-Review: Deploy a scalable service for ACME (LetsEncrypt) certificate management - https://phabricator.wikimedia.org/T199711 (10Krenair) [16:58:07] 10Traffic, 10Certcentral, 10Operations, 10vm-requests, 10Patch-For-Review: Create VMs for certcentral hosts - https://phabricator.wikimedia.org/T206308 (10Krenair) [16:58:10] 10Traffic, 10Certcentral, 10Operations, 10Continuous-Integration-Config, and 2 others: Set up CI for new repo operations/software/certcentral.git - https://phabricator.wikimedia.org/T198541 (10Krenair) [16:58:15] 10Traffic, 10Certcentral, 10Operations: Pick up a suitable ACME library for certcentral - https://phabricator.wikimedia.org/T199717 (10Krenair) [16:58:21] 10Traffic, 10Certcentral, 10Operations, 10Continuous-Integration-Config: Provide a CI container with pebble - https://phabricator.wikimedia.org/T200405 (10Krenair) [16:58:24] 10Traffic, 10Certcentral, 10Operations, 10Patch-For-Review: certcentral: phantom test failure around challenge success - https://phabricator.wikimedia.org/T203422 (10Krenair) [16:58:27] 10Traffic, 10Certcentral, 10Operations, 10Patch-For-Review: certcentral: Make configurable the cmd executed to perform a DNS zone update - https://phabricator.wikimedia.org/T203678 (10Krenair) [16:58:30] 10Traffic, 10Certcentral, 10Operations, 10Patch-For-Review: Create and deploy a centralized letsencrypt service - https://phabricator.wikimedia.org/T194962 (10Krenair) [16:59:17] 10Traffic, 10Certcentral, 10Operations: certcentral: challenge checking on *all* pooled backend hosts - https://phabricator.wikimedia.org/T203396 (10Krenair) [16:59:28] 10Traffic, 10Certcentral, 10Operations: certcentral: Provide script for certificate revocation - https://phabricator.wikimedia.org/T203423 (10Krenair) [16:59:46] 10Traffic, 10Certcentral, 10Operations: certcentral: delay deployment of renewed certs to wait out skewed client clocks - https://phabricator.wikimedia.org/T204997 (10Krenair) [17:02:17] okay, stuff to do: https://phabricator.wikimedia.org/project/board/3694/ [17:02:24] anyone spot anything missing there? [17:15:56] 10HTTPS, 10Traffic, 10Operations: letsencrypt puppetization: add parallel rsa+ecdsa cert support - https://phabricator.wikimedia.org/T141266 (10Krenair) @bblack ? [17:16:31] 10HTTPS, 10Traffic, 10Operations, 10Patch-For-Review: letsencrypt puppetization: upgrade for scalability - https://phabricator.wikimedia.org/T134447 (10Krenair) @bblack ? [19:30:29] 10Traffic, 10Wikimedia-Apache-configuration, 10DNS: Remove *.cz domains from WMF's infrastructure - https://phabricator.wikimedia.org/T206923 (10Urbanecm) [19:30:38] 10Traffic, 10Wikimedia-Apache-configuration, 10DNS, 10Operations, 10User-Urbanecm: Remove *.cz domains from WMF's infrastructure - https://phabricator.wikimedia.org/T206923 (10Urbanecm) [19:59:50] 10HTTPS, 10Traffic, 10Operations, 10Performance-Team (Radar): TLS certificates renewal process - https://phabricator.wikimedia.org/T196248 (10Krinkle)