[09:25:50] klausman: o/ [09:26:19] I had a chat with Janis and for the moment it seems ok to use https://wikitech.wikimedia.org/wiki/Enable_TLS_for_Kubernetes_deployments#Create_and_place_certificates for inference.wikimedia.org [09:26:41] once we have it available on the deployment servers, my idea is the following [09:27:01] 1) allow an optiona k8s secret definition in the knative-serving chart (will file a follow up code review) [09:27:06] *optional [09:27:34] 2) somehow make helmfile fetch the certificate config and inject it to the knative chart as kubernetes secret setting [09:27:42] shouldn't be horrible to do [09:27:46] what do you think? [09:28:15] Sounds like a good plan. [09:28:25] I'll give that techwiki page a thorough [09:28:28] +read [09:28:36] perfect :) [09:29:18] we may apply the same trick for kfserving or use cfssl as John proposed, not sure, we'll see [09:29:21] one thing at the time :D [09:29:35] (pretty sure that deploying knative in prod will be fun) [11:39:14] * elukey lunch! [15:29:04] 10Lift-Wing, 10serviceops, 10Kubernetes, 10Machine-Learning-Team (Active Tasks): Discussion: dedicated directory in the deployment-chart repository for ML services - https://phabricator.wikimedia.org/T286791 (10elukey) [15:44:00] I know this is a wildly less interesting question than the above but do folks have a preference for documentation being on MediaWiki.org vs. wikitech? [15:46:15] chrisalbon: o/ folks being us or community members? [15:46:24] everyone [15:47:10] for technical things related to the clusters etc.. I think that wikitech is the natural place to write things (most people only look in there) [15:47:19] the rest I am not sure :) [15:47:36] ORES is on MediaWiki.org, most things in the dept are in WikiTech, since we are going to start writing and posting a lot more in the future (model cards etc) it is worth asking the question [15:48:30] yes definitely [15:49:34] I'd draw the line between what we (as ML team or WMF technology) would need to look up (example: what kubernetes clusters, how to execute a procedure, etc..) vs more general topics (model cards, etc..) [15:50:26] for example: at some point I'll try to write https://wikitech.wikimedia.org/wiki/User:Elukey/MachineLearning/kfserving in a better form under a ML official page of wikitech [15:51:01] but I don't expect community members to be super interested in it (unless they want to work on the infra or fork it, in that case I think they'll go and lookup wikitech anyway) [15:55:18] (not sure if I totally miss you question or if what I wrote makes sense :D) [16:18:28] yeah that makes total sense [16:18:54] mediawiki = things that the community would be interested in [16:19:20] wikitech = our "internal" documentation for the system [16:29:23] +1 ues [16:29:24] yes [16:38:47] going afk, have a nice weekend folks! [16:43:20] have a great weekend Luca! Thanks for everything this week [16:50:33] chrisalbon: i think you have it right, mediawiki = community and high level project stuff, wikitech internal tech docs for system stuff [16:50:53] although i'm still a bit unsure about where the model cards should go [16:52:15] That makes sense and frankly is easier since we wouldn't need to migrate the existing things [16:53:15] I think a big argument for model cards being of mediawiki is that wikitech isn't part of the single sign-on yet, so if someone in the community wanted to monitor a card they'd need to create a separate account [16:53:30] whereas on Mediawiki they'd probably already be logged in [16:53:47] ahh yep that's a pretty strong point [16:55:03] although I don't know if that is going to change soon [16:55:08] I didn't read the phab ticket about it [16:56:47] probably not in the near future [16:57:48] ah cool, yeah then it is a pretty strong case for the model cards being within the SSO world [17:16:01] 10Lift-Wing, 10serviceops, 10Kubernetes, 10Machine-Learning-Team (Active Tasks): Discussion: dedicated directory in the deployment-chart repository for ML services - https://phabricator.wikimedia.org/T286791 (10ACraze) > We should probably create a separate `ml-services` directory, in which we'll place (in... [18:10:32] chrisalbon: majavah actually there is a concrete plan to make wikitech part of SUL. it's happening sorta soon but I personally think it should be on mw.org [18:10:57] my rule of thumb is if "Wikipedia editors need to interact with it, mediawiki.org is a better a place" [18:11:16] wikitech is basically sysadmin stuff [18:13:24] Amir1: is there? my understanding is that it's blocked on having a standalone ldap account management portal, and haven't been aware of any concrete plans for that [18:13:56] let me check, I saw its ticket [18:14:35] we have a plan to move wikitech to a core db section, you might be confusing those two [18:14:41] T161859 [18:14:48] T237773 [18:15:01] no stashbot in here? :/ [18:15:33] majavah: wikitech is in core db section (s10) [18:15:39] you mean the appservers? [18:15:54] the second ticket [18:16:26] haha T167973 [18:16:35] no, s10 is actually m5, https://phabricator.wikimedia.org/T167973 [18:18:37] yeah [18:18:46] it seems more fun than it looks [18:22:40] i still don't see any concrete plans for ldap management https://phabricator.wikimedia.org/T179463 [20:05:22] Amir1 okay cool, "Wikipedia editors need to interact with it, mediawiki.org is a better a place" is as good a rule as any