[07:36:22] 10GitLab (CI & Job Runners), 10Release-Engineering-Team (Priority Backlog 📥): Support http_proxy, https_proxy and other proxy `build-arg:` options in blubber buildkit frontend - https://phabricator.wikimedia.org/T317997 (10hashar) Looks like https://gerrit.wikimedia.org/r/c/operations/puppet/+/833125/ broke Pu... [07:58:44] jelto: good morning, I made a fix to profile::gitlab::runners Puppet class. It requires some proxy parameters which were explicitly set to :undef leading to a compilation error. The fix is https://gerrit.wikimedia.org/r/c/operations/puppet/+/840835 ;) [08:07:39] might not be the best patch ever thought but looks like it fixes the compile error :D [08:09:07] hashar: thanks for fixing this! I'm going to merge this soon. [08:37:06] hashar: merged :) the error should be gone also on production branch soon [08:37:37] thanks ;) [08:55:55] 10GitLab (Project Migration), 10Release-Engineering-Team, 10serviceops-collab: Create new GitLab project group: wm-juniors-il - https://phabricator.wikimedia.org/T313750 (10jijiki) [08:56:23] 10GitLab (CI & Job Runners), 10serviceops-collab, 10Patch-For-Review, 10Release-Engineering-Team (Priority Backlog 📥), 10User-brennen: Deploy buildkitd to trusted GitLab runners - https://phabricator.wikimedia.org/T308271 (10jijiki) [09:55:34] 10GitLab (Infrastructure), 10serviceops-collab: Create GitLab mirror - https://phabricator.wikimedia.org/T291322 (10jijiki) [10:21:57] 10GitLab (Auth & Access), 10Release-Engineering-Team, 10User-brennen: Create bot to sync LDAP groups with related GitLab groups - https://phabricator.wikimedia.org/T319211 (10jbond) >>! In T319211#8280270, @brennen wrote: > Some background for current state on {T274461} and {J273}. tl;dr all the ways i have... [10:22:38] 10GitLab (CI & Job Runners), 10Release-Engineering-Team, 10Security-Team, 10Patch-For-Review, and 2 others: Allow registry.gitlab.com/security-products/**/* for gitlab shared runner docker images - https://phabricator.wikimedia.org/T312961 (10Jelto) To me it's not clear what images are in `registry.gitlab.... [10:25:29] 10GitLab (CI & Job Runners), 10Release-Engineering-Team, 10Security-Team, 10serviceops-collab, and 3 others: Allow registry.gitlab.com/security-products/**/* for gitlab shared runner docker images - https://phabricator.wikimedia.org/T312961 (10Jelto) [10:26:35] 10GitLab, 10Infrastructure-Foundations, 10SRE, 10CAS-SSO: migrate gitlab away from the CAS protocol - https://phabricator.wikimedia.org/T320390 (10jbond) [10:26:48] 10GitLab, 10Infrastructure-Foundations, 10SRE, 10CAS-SSO: migrate gitlab away from the CAS protocol - https://phabricator.wikimedia.org/T320390 (10jbond) p:05Triage→03Medium [12:53:19] 10GitLab (CI & Job Runners), 10serviceops-collab: Evaluate if Docker can be executed as non-root on Trusted Runners - https://phabricator.wikimedia.org/T320411 (10Jelto) [12:53:57] 10GitLab (CI & Job Runners), 10Security-Team, 10serviceops, 10serviceops-collab, and 3 others: Setup GitLab Runner in trusted environment - https://phabricator.wikimedia.org/T295481 (10Jelto) [12:58:59] 10GitLab (CI & Job Runners), 10Security-Team, 10serviceops, 10serviceops-collab, and 3 others: Setup GitLab Runner in trusted environment - https://phabricator.wikimedia.org/T295481 (10Jelto) Some more explanation to the above edit: Further security hardening of Docker daemon got a dedicated task T320411.... [16:35:49] 10GitLab (Project Migration), 10Striker, 10Tools, 10Developer-Advocacy (Jul-Sep 2022), 10User-bd808: Fix misleading "Diffusion" creation in Striker (actually creates on GitLab) - https://phabricator.wikimedia.org/T320438 (10valerio.bozzolan) [22:09:20] 10GitLab, 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾): Fork buildkitd and disable the auth token cache that is currently shared between client connections - https://phabricator.wikimedia.org/T319694 (10dduvall) [22:10:06] 10GitLab, 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾): Fork buildkitd and disable the auth token cache that is currently shared between client connections - https://phabricator.wikimedia.org/T319694 (10dduvall)