[13:03:57] <elukey>	 hello folks!
[13:04:14] <elukey>	 kafka-logging100[1,2] need a kafka restart to pick up the new TLS cert (expires in 6 days)
[15:03:21] <moritzm>	 four logstash nodes have https://debmonitor.wikimedia.org/packages/apache2-bin-dbgsym installed
[15:04:00] <moritzm>	 I'll have to uninstall these, there are new apache2 security updates and the dbg symbols need to match the currently installed version
[15:04:19] <moritzm>	 and for packages released via security.d.o they are only available when they enter a point release
[15:04:46] <cwhite>	 moritzm: these were installed to debug an issue that is no longer an issue
[15:04:53] <cwhite>	 safe to remove
[15:05:11] <moritzm>	 ok
[15:07:01] <moritzm>	 done, removed on all four (plus the apache updates installed)
[15:07:36] <cwhite>	 thank you!
[15:28:04] <elukey>	 cwhite: o/ ok if I roll restart the kafka brokers for kafka logging eqiad to pick up the new TLS certs? Will run the cookbook
[15:28:50] <cwhite>	 elukey: sgtm, thank you!
[15:28:57] <elukey>	 ack! <3
[15:57:41] <elukey>	 all done!
[15:57:51] <elukey>	 no more alerts, certs have been picked up
[16:05:59] <cwhite>	 thank you so much!
[23:04:55] <mutante>	 you can now switch the graphite primary server to other DC by just making a Hiera edit in common.yaml
[23:05:08] <mutante>	 switching graphite to cfssl certs right now
[23:05:22] <mutante>	 verified everything on the non-primary server first