[06:45:49] heads up: I just merged a puppet patch that changes all kubeconfig files from using hardcoded tokens to client certs. "Should not behave differently" ;-) [14:46:07] hello folks, I filed https://gerrit.wikimedia.org/r/c/operations/debs/kubernetes/+/924963 to remove a tie between the kubelet systemd unit and cadvisor, since today we had some hosts with the kubelet knocked out (see profile::base, cadvisor is being rolled out randomly on nodes) [14:46:32] Filippo manually fixed the affected k8s nodes, but we should find a more stable solution (hence the patch above..) [14:46:47] no idea if cadvisor is meant to stay in the kubelet's unit, lemme know your thoughts [14:55:15] akosiaris: I don't think I have the capacity for that with things to finish up before vacation - could you take a look? [14:55:48] jayme: in a meeting in 5m [14:56:02] sure,sure. I meant in general, not right now [14:56:05] but I can take a look tomorrow [14:56:24] super thanks [14:59:01] the original commit is https://gerrit.wikimedia.org/r/plugins/gitiles/operations/debs/kubernetes/+/477ac9742258bf26348b269befb06db828978b98%5E%21/debian/kubernetes-node.kubelet.service [14:59:10] I'll add it to the cr