[07:59:08] 10GitLab, 10Infrastructure-Foundations, 10SRE, 10serviceops-collab, 10CAS-SSO: migrate gitlab away from the CAS protocol - https://phabricator.wikimedia.org/T320390 (10Jelto) [13:21:35] 10GitLab (CI & Job Runners), 10Security-Team, 10serviceops, 10serviceops-collab, and 3 others: Setup GitLab Runner in trusted environment - https://phabricator.wikimedia.org/T295481 (10Jelto) While doing more debugging around the firewall rules for Trusted Runners I found out the firewall mostly work, as d... [20:08:20] 10GitLab (CI & Job Runners), 10Release-Engineering-Team, 10Security-Team, 10serviceops-collab, and 3 others: Allow registry.gitlab.com/security-products/**/* for gitlab shared runner docker images - https://phabricator.wikimedia.org/T312961 (10brennen) > My concerns are also relevant for registry.gitlab.co... [22:00:58] jelto: looks like the gitlab-trusted-runner pipeline is failing due to an invalid token https://gitlab.wikimedia.org/repos/releng/gitlab-trusted-runner/-/jobs/26592 [22:01:20] maybe the token needs to be refreshed? i'm not sure where to get a new one and what scope it needs [22:25:12] I was just about to ask about that.