[00:01:45] <enterprisey>	 According to wikitech, the toolforge redis instance has a limit of 12 GB. that's shared across all tools, right? And so I would have to manage & limit my tool's  usage of redis, right? If so, how much memory should I limit my tool to
[00:28:17] <wm-bb>	 <harej> It's one instance that's shared across all of the tenants
[10:19:55] <dcaro>	 !log quarry Deploying T287471 1/2 - creating DB index
[10:20:01] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Quarry/SAL
[10:20:02] <stashbot>	 T287471: Validate and autocomplete database names in the database input field - https://phabricator.wikimedia.org/T287471
[10:21:22] <dcaro>	 !log quarry Deploying T287471 2/2 - updating code on the web and worker servers
[10:21:25] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Quarry/SAL
[10:23:37] <majavah>	 enterprisey: how much data do you imagine you would need to store? usually you should be fine if you have a reasonable amount of data and set reasonable expiries for your keys
[10:25:37] <dcaro>	 !log quarry Reverting deploy of T287471 - saved queries fail to show the DB field, will open a task
[10:25:41] <enterprisey>	 Well, I was thinking "as much as I can get away with, and for as long as I can get away with" (it's an edit counter tool that caches counts in redis), so I'll be back with better numbers once I have some idea of how much data one user's counts will take, and how many users have enough edits for this to make a difference
[10:25:42] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Quarry/SAL
[10:25:43] <stashbot>	 T287471: Validate and autocomplete database names in the database input field - https://phabricator.wikimedia.org/T287471
[10:28:36] <majavah>	 I'd rather not promise anything like "you can store X MB", at least not without looking more into current usage
[12:53:12] <wm-bot>	 !log tools.lexeme-forms <lucaswerkmeister> deployed 92e5e0d70c (l10n updates)
[12:53:16] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.lexeme-forms/SAL
[14:14:32] <CristianCantoro>	 hi all, it seems that I cannot create a Web Proxy to a VPS because I get the error:
[14:14:36] <CristianCantoro>	 ` Duplicate RecordSet `
[14:15:35] <CristianCantoro>	 nevermind, i just found the right place to edit in the DNS zones
[14:17:21] <CristianCantoro>	 uhm, it seems that I cannot update the DNS records
[14:19:16] <majavah>	 !log tools building node12 images - T284590 T243159
[14:19:23] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL
[14:19:23] <stashbot>	 T243159: Request to enable node version 12.14.1 in toolforge to deploy VideoCutTool - https://phabricator.wikimedia.org/T243159
[14:19:23] <stashbot>	 T284590: Build Bullseye based Toolforge images - https://phabricator.wikimedia.org/T284590
[14:22:10] <dcaro>	 CristianCantoro: what pyroject are you working on?
[14:23:03] <CristianCantoro>	 wikicommunityhealth
[14:23:34] <CristianCantoro>	 it seems that there exist already a DNS record for wikicommunityhealth.wmcloud.org pointing to an IP address, but this address does not belong to any VPS instance of the project
[14:24:52] <CristianCantoro>	 the record points to 185.15.56.49
[14:25:36] <dcaro>	 that's the proxy yep, that's ok, the proxy should nat to the VMs
[14:26:15] <CristianCantoro>	 ok, but if I try to add a web proxy for `wikicommunityhealth.wmcloud.org`, it doesn't let me
[14:26:20] <dcaro>	 s/nat/proxy xd
[14:26:26] <dcaro>	 looking
[14:32:06] <dcaro>	 Interesting, the proxy has no entry for wikicommunityhealth.wmcloud.org
[14:33:01] <dcaro>	 CristianCantoro: can you create a task? I'll put info there and follow up
[14:33:25] <mutante>	 This sounds vageuley familiar, I think it's just that it takes a while to forget a deleted entry 
[14:33:42] <mutante>	 like on the DNS level vs what it shows in web UI
[14:34:00] <CristianCantoro>	 dcaro: I don't remember having deleted... so, if I did that it may have been a wile
[14:34:04] <CristianCantoro>	 *shile
[14:34:05] <dcaro>	 might be yes
[14:34:14] <CristianCantoro>	 *while (oh my,,,)
[14:34:18] <dcaro>	 xd
[14:36:27] <mutante>	 no error if you try a different name you never used before, right?
[14:36:59] <mutante>	 just make it wch.wmcloud.org for now and then create that ticket to get the old name nuked properly ?
[14:38:15] <CristianCantoro>	 dcaro: https://phabricator.wikimedia.org/T288962
[14:38:22] <CristianCantoro>	 mutante: I can try...
[14:38:30] <dcaro>	 CristianCantoro: on it
[14:39:23] <CristianCantoro>	 mutante: worked like a charm  http://wikichm-test.wmcloud.org 
[14:39:36] <mutante>	 CristianCantoro: yea, I think I ran into it before 
[14:39:39] <mutante>	 nice
[14:39:54] <mutante>	 pretty sure now it's just that the old entry is still referenced somewhere
[14:40:37] <dcaro>	 yep, looks like it, will deal with it
[14:40:38] <mutante>	 like when I tried to delete and then recreate the same thing later
[14:40:54] <mutante>	 it doesn't properly clean it up (sometimes, maybe a race)
[14:42:01] <CristianCantoro>	 housekeeping question, there is a way to create a tag for a project so that I can tag all the task relate to my project (wikicommunityhealth)?
[14:43:32] <majavah>	 CristianCantoro: yes, just file a task in the #project-admins project and ask for it to be created under vps-projects
[14:54:46] <CristianCantoro>	 majavah: thanks, done https://phabricator.wikimedia.org/T288963
[15:19:51] <CristianCantoro>	 I have a couple of questions:
[15:20:17] <CristianCantoro>	 can I modify the SSH configuration so that I can login directly from a VPS instance to another?
[15:21:35] <CristianCantoro>	 is there a way to mount a volume that is already attached to a VPS as read-only to another VPS?
[15:35:15] <gry>	 CristianCantoro: about the first one: i'd suggest yes - generate an ssh keypair on the first vps, and add its pubkey to ~/.ssh/authorized_keys on the second vps which you're connecting to
[15:36:03] <CristianCantoro>	 gry: perfect, that's what I had in mind
[15:39:52] <gry>	 ok :) about volume mounting please wait, someone else may wish to help, as i have no idea about that, sorry
[15:45:31] <majavah>	 !log tools reset sul account mapping on striker for developer account "DutchTom" T288969 
[15:45:37] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL
[15:45:38] <stashbot>	 T288969: Unlink SUL account from dev account - https://phabricator.wikimedia.org/T288969
[15:46:15] <wm-bot>	 !log tools.wmde-access <lucaswerkmeister-wmde> updated symfony/yaml from v3.4.11 to v5.3.6 (the old version was unable to parse current puppet data.yaml)
[15:46:18] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.wmde-access/SAL
[16:08:28] <musikanimal>	 hello! new developer accounts are subject to approval before they can be used, is that correct? how long does this process typically take, and is there anyone I can talk to about expediting it?
[16:09:41] <mutante>	 musikanimal: You can just register a user on wikitech yourself, it just isn't being added to specific projects automatically, so depends what you mean 
[16:09:50] <majavah>	 musikanimal: Toolforge accounts need to be approved, wikitech/gerrit should work instantly and Cloud VPS just needs an existing project admin to add them
[16:10:21] <mutante>	 majavah summarized it so much better
[16:10:52] <mutante>	 could also be about being added to specific groups inside gerrit to get +2 on specific repos
[16:11:04] <mutante>	 developer can mean a lot of things I guess
[16:13:28] <musikanimal>	 we have a new engineering manager who followed the Toolforge instructions to create a developer login. She can't get into anything behind the developer single sign-on, such as GitLab, but she can login to Wikitech. I also noticed her account doesn't show up in the auto-completion for adding her to a Toolforge tool
[16:15:05] <musikanimal>	 LDAP username is KSiebert
[16:15:21] <majavah>	 I don't see a toolforge access request for them
[16:15:25] <majavah>	 did they ever apply for access?
[16:15:46] <majavah>	 and gitlab currently needs cn=nda or cn=wmf membership
[16:17:42] <musikanimal>	 maybe not, she went by https://wikitech.wikimedia.org/wiki/Help:Create_a_Wikimedia_developer_account#Toolforge_users . I'll have her apply for Toolforge membership
[16:17:55] <andrewbogott>	 I see uid=ksiebert,ou=people,dc=wikimedia,dc=org in ldap at least
[16:18:00] <andrewbogott>	 with a key set up even!
[16:18:42] <andrewbogott>	 that /should/ be adequate for other developer account things but there might be other ldap group membership needed.
[16:18:49] <andrewbogott>	 no idea how that works for gitlab though
[16:20:45] <andrewbogott>	 can confirm that they have no project memberships -- no bastion, no toolforge
[16:20:46] <mutante>	 here is an example ticket for how a WMDE user gets membership in the "nda" group:
[16:20:49] <mutante>	 https://phabricator.wikimedia.org/T288355
[16:20:51] <mutante>	 this will solve gitlab too 
[16:21:22] <mutante>	 please create one like that and they will be contacted by WMF legal about signing an DNA
[16:21:25] <mutante>	 NDA
[16:22:43] <Lucas_WMDE>	 signing over their DNA? that’s a new requirement ;)
[16:22:45] <mutante>	 or it should be discussed why "wmde" is not a group that gives access to gitlab
[16:22:51] <mutante>	 per https://wikitech.wikimedia.org/wiki/LDAP/Groups#wmde_group
[16:23:07] <mutante>	 maybe Jelto would simply add that (after discussing it)
[16:23:16] <majavah>	 or just open it for everyone? :P
[16:23:23] <mutante>	 but usually all the wmde people have "nda" as well
[16:23:36] <mutante>	 I dont think it's ready for that, it's in beta/MVP 
[16:23:39] <mutante>	 but dunno
[16:24:03] <mutante>	 might want to ask that in -releng
[16:24:17] <majavah>	 afaik they were already planning on doing that soon
[16:24:55] <mutante>	 personally I wouldn't recommend pushing it before all the backup/restore and monitoring tickets are resolved
[16:25:04] <mutante>	 just imho
[16:25:54] <mutante>	 users usually expect all that stuff to already be there once they can use something
[16:26:17] <majavah>	 musikanimal: for the original Toolforge issue, she needs to create an access request as described on https://wikitech.wikimedia.org/wiki/Portal:Toolforge/Quickstart
[16:26:31] <musikanimal>	 k thanks, I sent that to her
[16:27:32] <majavah>	 musikanimal: and some other services need membership in the "wmf" nda group, description and instructions for that are on https://wikitech.wikimedia.org/wiki/LDAP/Groups
[16:27:49] <mutante>	 unless the new user wants to explicitly test it they might be happier with just using the existing workflow with gerrit, it's already pretty complex without involving gitlab. just my 2 cents
[17:00:54] <majavah>	 !log tools remove and re-add toollabs-webservice 0.75 on stretch-toolsbeta repository
[17:00:59] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL
[20:13:27] <balloons>	 majavah, thanks for the new k8s runtime images!
[21:28:07] <wm-bb>	 <harej> This is more a "technical engagement" question but how do I leave feedback for Olga's team? Neo-Vector seems to be getting through its awkward adolescent stage and I am pretty happy but have some specific feedback.
[21:41:35] <bd808>	 @harej: a good question honestly. https://www.mediawiki.org/wiki/Wikimedia_Product still links to https://www.mediawiki.org/wiki/Readers/Web/Team but that page looks a bit stale. Maybe the easiest thing would be to contact https://www.mediawiki.org/wiki/User:OVasileva_(WMF) directly?