[09:00:36] 10GitLab (Infrastructure), 10serviceops-collab: Make gitlab-replica-old accessible - https://phabricator.wikimedia.org/T328635 (10Jelto) [11:30:24] 10GitLab (Infrastructure), 10serviceops-collab: Add SPF records for gitlab.wikimedia.org - https://phabricator.wikimedia.org/T328642 (10Jelto) [11:32:21] 10GitLab (Infrastructure), 10DNS, 10Infrastructure-Foundations, 10Mail, 10serviceops-collab: Add SPF records for gitlab.wikimedia.org - https://phabricator.wikimedia.org/T328642 (10Reedy) [14:37:33] 10GitLab (Infrastructure), 10DNS, 10Infrastructure-Foundations, 10Mail, and 3 others: Add SPF records for gitlab.wikimedia.org - https://phabricator.wikimedia.org/T328642 (10eoghan) p:05Triage→03Medium a:03eoghan [16:17:06] o/ [16:17:59] We'll be doing some security upgrades on gitlab production right after the staff meeting. [18:17:13] The update is complete. :) [18:17:33] Thanks! [18:20:38] :) [19:07:18] am i correct in thinking we're not setting `allowed_images` for gitlab cloud runners? [19:16:26] which cloud? [19:17:02] hieradata/cloud.yaml:profile::gitlab::runner::allowed_images: [19:17:10] we do for wikimedia cloud [19:17:42] except it's in that generic "cloud.yaml" and not in some project-specific place [19:20:16] s/cloud/digitalocean [19:20:43] Correct. [19:20:49] yeah, that's the only one i found. i'd been remembering a list elsewhere as well, but i'm probably a bit out of date. [19:20:57] cool. [20:21:47] 10GitLab (Administration, Settings & Policy), 10Release-Engineering-Team (Radar), 10Upstream, 10User-brennen: GitLab should not display ads for paid versions - https://phabricator.wikimedia.org/T295453 (10brennen) a:05brennen→03None [20:23:36] 10GitLab (CI & Job Runners), 10CirrusSearch, 10Discovery-Search, 10Patch-For-Review, and 2 others: Consider adding "official" docker.elastic.co images to the list of allowed images for gitlab runners - https://phabricator.wikimedia.org/T327519 (10brennen) 05Open→03In progress [20:23:44] 10GitLab (CI & Job Runners), 10mwcli, 10Patch-For-Review, 10Release-Engineering-Team (Blocking 🧱), 10User-brennen: Add registry.gitlab.com/dependabot-gitlab/dependabot to list of allowed images for gitlab runners - https://phabricator.wikimedia.org/T326507 (10brennen) 05Open→03In progress [20:25:52] 10GitLab (Administration, Settings & Policy), 10Release-Engineering-Team (Radar), 10Upstream, 10User-brennen: Investigate whether issues, operations, wikis, etc. can be disabled globally on GitLab - https://phabricator.wikimedia.org/T264231 (10brennen) a:05brennen→03None [20:43:59] 10GitLab, 10Release-Engineering-Team, 10serviceops-collab, 10Patch-For-Review: Align the GitLab runner tags - https://phabricator.wikimedia.org/T325069 (10bd808) >>! In T325069#8578664, @Jelto wrote: > So the last tag which isn't settled yet is `cloud`. I don't see big benefits in migrating from tag `cloud...