[12:01:21] <wikibugs>	 10GitLab, 10Gerrit, 10Horizon, 10SRE, and 2 others: Take some pointers from GitHub security updates - https://phabricator.wikimedia.org/T304231 (10jbond) p:05Triage→03Medium @Reedy is the suggestion to implement this for production ssh or just for gitlab?  FTR i think both are useful but it will dictat...
[12:06:34] <wikibugs>	 10GitLab (Project Migration), 10WMIT-CiviCRM, 10WMIT-Infrastructure, 10Release-Engineering-Team (Done by Feb 23 🧟): Create new GitLab project group for Wikimedia Italia - https://phabricator.wikimedia.org/T301791 (10valerio.bozzolan)
[14:07:12] <arturo>	 hey there, do you know if our gitlab instance has this enabled? https://docs.gitlab.com/ee/administration/clusters/kas.html
[14:11:32] <jelto>	 arturo: Hi. GitLab Agent for Kubernetes is not enabled currently. It's also not on the near term roadmap afaik.
[14:14:28] <arturo>	 jelto: thanks. That's interesting
[14:15:20] <arturo>	 I wonder if is not in the roadmap because nobody showed interest so far
[14:28:51] <jelto>	 For me it's the first time hearing interest in the Agent for Kubernetes. I know that integration to our production/wikikube Kubernetes Cluster is a bit different (helmfile based and not plain yaml manifests). I'm not sure if the Agent is useful for the needs of the existing Kubernetes stack.
[14:29:52] <jelto>	 If we are going to deploy to other Kubernetes environments and the agent could be helpful there we can think about integrating it. But currently I don't see a big usecase for that :)
[15:27:54] <brennen>	 arturo, jelto: for what it's worth, jeena and i have been talking about turning that on - see T283894
[15:27:54] <stashbot>	 T283894: Spike: Research hosts for preview environment - https://phabricator.wikimedia.org/T283894
[15:28:05] <brennen>	 and https://gerrit.wikimedia.org/r/c/operations/puppet/+/767249/
[15:28:51] <brennen>	 not a high priority at the moment, and we need to research further, but it could be useful for the "review apps" feature
[15:29:34] <brennen>	 it also seems like they've recently changed a bunch of stuff upstream, so the documentation is kind of a mess right now.
[15:39:27] <wikibugs>	 10GitLab, 10Gerrit, 10Horizon, 10SRE, and 2 others: Take some pointers from GitHub security updates - https://phabricator.wikimedia.org/T304231 (10Reedy) I think we should try and implement it everywhere (eventually). Might be worth forking into subtasks for services/areas. And keep this as the overall tra...
[16:11:50] <wikibugs>	 10GitLab, 10Gerrit, 10Horizon, 10SRE, and 2 others: Take some pointers from GitHub security updates - https://phabricator.wikimedia.org/T304231 (10Paladox) we don't have git:// enabled for gerrit, we have had ECDSA and Ed25519 for years now and we can disable the ssh algorithms we don't want using the gerr...
[16:49:37] <wikibugs>	 10GitLab (Integrations), 10preview-environment, 10Patch-For-Review, 10User-brennen, 10User-jeena: Spike: Research hosts for preview environment - https://phabricator.wikimedia.org/T283894 (10aborrero) >>! In T283894#7746051, @gerritbot wrote: > Change 767249 had a related patch set uploaded (by Brennen B...