[16:00:29] klausman sure. With our ready-fire-aim puppet workflow, thinking this is something we'd just have to merge and roll back if it doesn't work. LMK if I'm wrong and you have tested it [16:01:32] be right there in the meeting [16:02:19] ACK [16:37:24] inflatador: entirely untested, but at least I'll only reimage staging for now, so limited blast radius. [16:39:17] inflatador: apparmor profiles for wikifunctions evaluator and orchestrator are at: https://github.com/wikimedia/operations-puppet/blob/production/modules/profile/files/kubernetes/node/wikifunctions-evaluator and https://github.com/wikimedia/operations-puppet/blob/production/modules/profile/files/kubernetes/node/wikifunctions-orchestrator if you [16:39:17] want to have a look [16:39:34] there's a simple profile shipping and loading them on the nodes [16:41:22] akosiaris excellent, thanks [16:41:39] also have a bash function for ya https://phabricator.wikimedia.org/P60144 [16:44:08] lol, that's somewhat useful indeed. Although there are people that hate gitiles in the org. [16:44:16] it will be handy though, thanks! [16:48:56] np! i tend to use it during pairing sessions