[08:46:59] thought of the day: dse-k8s-eqiad now has 30 workers. Would it make sense to enable dragonfly to enable p2p image pulling? The airflow images are quite large (although don't change often and are quickly pulled on all workers), so it might help alleviate some of the load we put on the registry [08:47:11] is it something we can enable after the fly? Do we need to cordon/drain the node before? [08:55:39] brouberol: there is no need to drain or something. Adding the relevant bits will reconfigure containerd so that the next image pull will go trough the p2p network [08:56:06] ohh, handy! [08:56:57] so that basically means adding the `include profile::dragonfly::dfdaemon` profile in the dse-k8s worker role and that's it? [08:57:41] it's been some years so I don't recall from the top of my head but https://phabricator.wikimedia.org/T359416 should have the relevant bits [08:58:53] profile::dragonfly::dfdaemon::proxy_urls_regex might make sense do specify since back in the days I measured some performance hit for small images [09:00:03] it would ofc also be nice to add a paragraph to https://wikitech.wikimedia.org/wiki/Dragonfly on how to enable it for a new cluster - if you have some additional minutes [09:01:51] (and it should be fine to reuse the existing supernodes, they're not particularly stressed by wikikube) [09:03:38] great, thank you! [12:36:15] jayme: I've submitted to enable dragonfly on dse-k8s workers on large (>1GB) images (picked by hand) https://gerrit.wikimedia.org/r/c/operations/puppet/+/1329551 [14:29:21] Does anyone have any example of how to make a restricted docker image (with blubber or otherwise)? We're trying to migrate Matomo to K8s but it has a payware plugin we can't distribute [14:30:17] inflatador: o/ restricted as in ending up under /v2/restricted in the docker registry? [14:30:29] IIUC that is reserved for mediawiki images [14:31:54] elukey ACK, is there another way to publish/distribute non-public images? [14:32:15] not that I know, I think matomo is the first use case after mediawiki's [14:32:37] let's open a task if you don't mind, so we can brainstorm about it [14:33:11] Cool, will add you as subscriber on https://phabricator.wikimedia.org/T436005 [15:22:08] dse-k8s clusters are now using dragonfly [15:36:50] {◕ ◡ ◕}