[09:20:18] !log tools.integraality Deploy 79e458d [09:20:20] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.integraality/SAL [17:13:38] i was gonna bug people about https://phabricator.wikimedia.org/T283443 but then realized that today's a holiday in the USA! [17:20:31] https://wikitech.wikimedia.org/wiki/Deployments/Yearly_calendar remains the most complete list of WMF holidays [17:20:50] I also love that pretty much everyone casually ignored that 12 April was a holiday [17:23:55] and "No deploys (not that there are ever deploys on Friday)" [17:31:20] @yuvipanda: commented there, you already have at least some access [17:31:48] i don't think i can grant anything else myself [18:33:38] !log tools.lexeme-forms deployed 148dafa60b (l10n updates) [18:33:42] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.lexeme-forms/SAL [19:59:02] !log tools.lexeme-forms briefly stopping tool to upgrade venv [19:59:05] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.lexeme-forms/SAL [20:00:54] !log tools.lexeme-forms pip upgrade (Flask 2.0.1 and other updates) [20:00:56] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.lexeme-forms/SAL [20:07:48] !log tools.lexeme-forms deployed 43a29c4369 (replace deprecated function) [20:07:51] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.lexeme-forms/SAL [20:09:56] majavah yay, thank you! [20:10:03] is paws inside the toollabs project? or elsewhere? [20:10:12] I think it is its own project, right? I don't remember 😐 [20:10:15] in its own project [20:10:37] oh wow, horizon enforces 2fa [20:10:40] it used to be in its own project, then moved to tools, then moved back to its own. [20:10:50] @chicocvenancio aaah, i see. [20:12:39] if you can still ssh into WMCS you can access it at ssh -J bastion.wmcloud.org paws-k8s-control-[1-3] [20:12:50] what are the social conventions around working on PAWS now? [20:12:57] back in the day I used to just... do stuff [20:13:27] I don't think I want to do that anymore, given the sweat others have poured into it! But I don't know who they are quite [20:13:40] and want to make sure I respect it, and treat this not as something I started but as something I'm now contributing to [20:15:48] its a bit more of don't break it, please. Lots of people using it at any given time. (https://hub.paws.wmcloud.org/hub/admin?sort=last_activity&order=desc&). [20:17:34] We've protected the master branch in the repo and expect code review, bstorm is the one who takes care of it the most these days. No real guarantees or other social practices around it, I think. [20:18:44] /me nods [20:19:17] I guess it's like how tools used to be [20:28:52] I just created https://phabricator.wikimedia.org/T284028 and want to slowly work on that 🙂 [20:29:13] plz leave thoughts there. I'm excited for it [20:52:56] I think horizon has always enforced 2FA? [20:52:57] Hmm no [20:52:58] It used to not check MFA at all perhaps [20:53:00] It was wikitech that had MFA, but it wasn't mandatory for anyone below cloudadmin, or something? [21:05:18] yeah, I *think* so? [21:05:28] I think it's been about 5y since i last usedi t [21:06:27] that looks great! (re @yuvipanda: I just created https://phabricator.wikimedia.org/T284028 and want to slowly work on that 🙂) [21:11:33] Yuvi, there is some weird permission stuff in WMCS k8s there [21:13:36] you should be able to do sudo su - and then use kubectl as root https://phabricator.wikimedia.org/T283443#7108018 is how to do it properly [21:17:55] https://www.irccloud.com/pastebin/FWfiEDMG/ [21:35:56] @yuvipanda ☝️ [21:36:01] ty! [21:36:10] i'll try it tomorrow 🙂 [23:27:31] hi [23:32:30] ive found web proxies for the cloud vps instance, but ive not found any webservice button on it [23:35:21] gry: what do you mean by webservice? [23:35:41] zppix said if i have webservice, then i can create a web proxy to access the cloud vps from internet [23:35:54] the expectation is that you set a web proxy to point to your instance on e.g. port 80 and then install apache/nginx on the instance to serve on port 80 [23:36:20] (or have the app directly listen on port 80) [23:36:34] and the web proxy will take care of TLS for you [23:37:06] ok, how do i install anything, if ircwebchat.wmcloud.org does not resolve? how will users use it? i have the ip under instances, but the subdomain isn't working [23:37:51] you have to ssh through the bastion, let me find the doc [23:37:55] when i ssh gryllida@IP, it says no route to host [23:38:03] ok, i will do it through bastion [23:38:17] https://wikitech.wikimedia.org/wiki/Help:Accessing_Cloud_VPS_instances [23:38:31] the hostname is ircwebchat.ircwebchat.eqiad1.wikimedia.cloud (from https://openstack-browser.toolforge.org/project/ircwebchat) [23:42:34] once you're in you should be able to sudo apt install whatever you want [23:44:14] that would be perfect, i logged in to bastion, created ssh keypair, added gry@bastion's pubkey to wikitech, waiting for it to let me into the vps now [23:44:30] thanks for your help, i'll ping you if it still refuses login in around half an hour [23:45:01] and it just let me in, thats good :) [23:45:46] can i make a backup of it, so that if i am unhappy with what i installed and how it works, then i can roll back to a previous backup? or it's not a part of this service [23:52:05] gry: I don't think there's any snapshot-on-request option, I think it's every week and requires a Cloud Services admin to recover. Typically we use puppet to manage stuff but that's more involved [23:52:32] ok, thanks [23:52:38] for now I think if you just keep track of what packages you install and tar/copy your files somewhere it might just be easier to create a new VM and set it up again [23:53:44] I can help with the puppet stuff if you want to go that route, but I wouldn't recommend it untill you're happy with what you have set up and want to have puppet just do all that setup for you [23:54:12] that's basically what we (mostly Amir.1) did for mailman, first set it up manually and then puppetized all the install steps we followed [23:54:34] puppet to re-do some steps to upgrade the webchat later if needed, or what is it useful for? [23:54:52] i mean there are some install steps, but they're only done once