[02:12:35] <andrewbogott>	 !log upgrading codfw1dev to openstack 'dalmation'  T381499
[02:12:35] <stashbot>	 andrewbogott: Unknown project "upgrading"
[02:12:36] <stashbot>	 T381499: Upgrade cloud-vps openstack to version 'Dalmation' - https://phabricator.wikimedia.org/T381499
[02:12:42] <andrewbogott>	 !log admin upgrading codfw1dev to openstack 'dalmation'  T381499
[02:12:48] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL
[07:31:25] <vgutierrez>	 what's the recommended way of injecting secrets on a puppetserver nowadays?
[07:31:59] <vgutierrez>	 context being T389241 reported by andrewbogott on IRC yesterday
[07:31:59] <stashbot>	 T389241: Hourly auth failures are occurring for the openstack user 'traffic-cloud-dns-manager' - https://phabricator.wikimedia.org/T389241
[07:33:38] <arturo>	 vgutierrez: a cherry pick on the project-local puppetserver
[07:34:36] <vgutierrez>	 I'm guessing on /srv/git/labs/private
[07:34:47] <arturo>	 vgutierrez: yeah, a commit on that repo
[07:35:04] <arturo>	 we usually have a commit title that starts with `[local]`
[07:35:16] <vgutierrez>	 thx
[07:35:28] <vgutierrez>	 any tips about restoring that DNS api credentials?
[07:35:46] <arturo>	 mmmm
[07:36:05] <arturo>	 last time I did, we had a wikitech-based workflow for the creds
[07:36:23] <arturo>	 but now wikitech is decoupled from the devel accounts, so I guess it should be something based on IDM?
[07:36:27] <arturo>	 I'm not entirely sure
[07:37:01] <arturo>	 aren't the docs up to date on that?
[07:37:53] <arturo>	 if they aren't, then this is worth a phab ticket
[07:38:06] <wm-bot>	 !log melos@tools-bastion-13 tools.stewardbots stewardbots/StewardBot/manage.sh restart  # Not reading RC
[07:38:08] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stewardbots/SAL
[07:38:56] <vgutierrez>	 arturo: that's https://wikitech.wikimedia.org/wiki/Portal:Cloud_VPS/Admin/Service_accounts
[07:39:01] <vgutierrez>	 definitely out of my scope :)
[07:41:02] <arturo>	 if bitu doesn't have a password reset workflow, then I guess our next best choice is to do a raw LDAP password update
[07:42:24] <vgutierrez>	 hmm I might have the password handy on a local credentials vault
[07:42:38] <vgutierrez>	 let me try it and I'll reach otherwise
[07:42:40] <vgutierrez>	 thx
[07:42:53] <arturo>	 👍
[08:13:12] <vgutierrez>	 arturo: so that password I got looks like it's outdated ( I'm getting 401s from the API) do you need another task to reset that user password via LDAP?
[08:28:06] <vgutierrez>	 hmm I guess I can do that using https://wikitech.wikimedia.org/wiki/Password_and_2FA_reset
[08:37:04] <vgutierrez>	 solved :D
[10:00:04] <arturo>	 vgutierrez: was that doc up-to-date? did you need anything specific because a service account?
[10:03:20] <arturo>	 what particular section did you follow?
[10:23:07] <vgutierrez>	 https://wikitech.wikimedia.org/wiki/Password_and_2FA_reset#Reset_user_password_in_LDAP
[10:45:00] <arturo>	 thanks
[11:04:00] <salixalba>	 I'm trying to set up and use a gitlab repository to use from my toolforge account. I've got a minimal repository at https://gitlab.wikimedia.org/toolforge-repos/salixalbatool but when I try and clone I get
[11:04:01] <salixalba>	 salixalba@tools-bastion-13:~$ git clone git@gitlab.wikimedia.org:toolforge-repos/salixalbatool.git
[11:04:01] <salixalba>	 Cloning into 'salixalbatool'...
[11:04:02] <salixalba>	 git@gitlab.wikimedia.org: Permission denied (publickey).
[11:05:04] <arturo>	 salixalba: I would review the SSH key you have configured in both your system and gitlab, they should match
[11:06:20] <salixalba>	 I can't see where you set SSH keys on gitlab
[11:07:47] <arturo>	 try here: https://gitlab.wikimedia.org/-/user_settings/ssh_keys
[11:09:51] <salixalba>	 Cheers, they hide that away!
[11:17:32] <arturo>	 cheers
[11:17:32] <taavi>	 salixalba: try using the HTTPS clone url instead of SSH?
[11:21:31] <salixalba>	 getting the SSH key set worked fine.
[11:21:35] <salixalba>	 tx all
[12:20:53] <wm-bb>	 <Hugo_Lz> NP, I'm not sure for that. We have a single page Vuejs front which queries a back end. I may need to ask Pushkar about this. (re @dpriskorn: I can help you write a Procfile if you want. Is the Vue app static or dynamic?
[12:20:53] <wm-bb>	 <Hugo_Lz> I'm guessing the former because you just copy ove...)
[12:24:08] <wm-bb>	 <Hugo_Lz> @dcaro_old , I'm inspecting the logs. If I understand well the only things you changed on Lingua Libre is its www/python/uwsgi.ini . Nothing else ? I'm updating our set-up documentation.
[12:48:38] <dcaro>	 Hugo_Lz yep, added one line and changed another
[13:15:22] <wm-bb>	 <Hugo_Lz> I believe your changed were : 
[13:15:22] <wm-bb>	 <Hugo_Lz> ```
[13:15:23] <wm-bb>	 <Hugo_Lz> - check-static = /data/project/lingua-libre/www/python/src/
[13:15:25] <wm-bb>	 <Hugo_Lz> + check-static = /data/project/lingua-libre/www/python/src/static/
[13:15:26] <wm-bb>	 <Hugo_Lz> + static-index = index.html```
[13:27:24] <dcaro>	 that sounds correct yes
[14:31:45] <wm-bb>	 <Hugo_Lz> Thank Dcaro !
[15:51:45] <wm-bb>	 <Hugo_Lz> Tuukka, tbh, I feel this Gitlab hook page is written in a confusing way for a junior. (re @tuukkahastrup: Instead of pushing over SSH, another option is to trigger a webhook and pull the update from there: https://wikitech.wikimedia.o...)
[22:23:07] <bd808>	 !log redirects Added qrank.wmcloud.org after usurping both the proxy and the domain from the qrank Cloud VPS project. https://lists.wikimedia.org/hyperkitty/list/cloud@lists.wikimedia.org/thread/EUIWWEG354NMU57QEBQVA5AIH7ORAF55/
[22:23:09] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Redirects/SAL