[10:12:21] debmonitor/docker-report are now watching all the clusters :) [10:12:39] I realized that the new code doesn't take into account the filters, so I'll make a patch for it asap [10:12:44] the rest seems working [10:12:46] some trivia [10:12:57] https://debmonitor.wikimedia.org/images/docker-registry.discovery.wmnet/envoy:1.23.10-3 -> Kubernetes containers [10:13:00] 4644 [10:53:08] \o/ [11:01:28] hnowlan: o/ I discovered that haproxy in thumbor should need an upgrade, at least to 2.8.3-1 (bookworm) [11:01:40] but we have 2.4.x now afaics, so it would be a version bump [11:01:53] do you think it is doable? [11:06:15] yeah should be fine [11:08:15] super [11:09:33] the other ones on Wikikube that I see on Buster are [11:09:34] docker-registry.discovery.wmnet/repos/wmde/wikidata-query-gui [11:09:43] docker-registry.discovery.wmnet/repos/wmde/wikidata-query-builder [11:10:01] docker-registry.discovery.wmnet/nutcracker (some ns still use 0.0.4) [11:10:25] docker-registry.discovery.wmnet/wikimedia/research-mwaddlink [11:10:31] docker-registry.discovery.wmnet/repos/sre/miscweb/design-style-guide [11:10:57] docker-registry.discovery.wmnet/prometheus-statsd-exporter (some still use 0.26-1) [11:11:14] docker-registry.discovery.wmnet/envoy (some still use the old image) [11:17:51] running docker report with buster compatibility so we can see in what namespaces [11:26:26] so the reimaing statsd usage is related to ... drum-roll ... kartotherian [11:26:32] that I guess it is me [11:26:35] (that backfired) [11:26:48] and also the ratelimit namespace [11:27:35] brouberol, btullis o/ - is the image-suggestion namespace on wikikube something that your team manages? [11:29:15] Well, we used to. It was sort of bundled in with the aqs2 services, but we no longer have much to do with those, either. It used to be structured data who managed that, but I'm not sure now. [11:29:39] lovely :( [11:29:50] I can try to ask in slack [11:30:19] brouberol: since we are here, what about the wikidata-query-gui? [11:30:26] sorry, btullis [11:31:04] elukey: For image suggestions, maybe it would be the MW interfaces team? https://phabricator.wikimedia.org/tag/mw-interfaces-team/ [11:31:19] Yes, wikidata-query-gui, that is one of ours. [11:32:36] all right, that one I think still runs on Buster :( [11:36:55] is it something that you can take care of during the next weeks? [11:37:03] you as in data platform sre :) [11:39:43] asked on slack for image-suggestion, maybe we get some confirmation for mw-interfaces-team.. I am afraid that this is yet another abandoned service [11:41:13] Yes, I think that technically WMDE builds the image for wikidata-query-gui, but we can work with them to update it. Would you be able to make us a ticket for it, if you have time please? [11:42:35] btullis: sure sure, standard fee 5 euros [11:42:39] :D [11:42:56] going to cut tickets later on for all the above [11:43:27] Ack, thanks. 5 euro in the mail. :-) [11:44:07] \o/ [12:48:54] sorry elukey, I'm +/- OOO today. I'm not feeling super duper great [12:49:58] rest and get well soon! [12:50:35] thanks :) [12:52:41] brouberol: sorry for the ping! rest and take it easy, nothing urgent [13:40:23] possibly dumb question, but do we have any apps that aren't terminating TLS thru Envoy? I ask because we're looking at OpenSearch for the dse-k8s-cluster and its operator requires TLS in the opensearch container itself https://github.com/opensearch-project/opensearch-k8s-operator/blob/main/docs/userguide/main.md#node-httprest-api