[07:51:45] When is next deployment window? https://wikitech.wikimedia.org/wiki/Deployments seems not updated. Is it auto updated or need to update manually? [11:49:48] kart_: I guess Tyler must've forgotten to run the script... [13:16:16] 10Project-Admins: Create project tag for Moderator Tools Team - https://phabricator.wikimedia.org/T305145 (10Samwalton9) [13:17:09] 10Project-Admins: Create project tag for Moderator Tools Team - https://phabricator.wikimedia.org/T305145 (10Samwalton9) Just checking in - is there anything else you need from us to create this project? Thanks! [14:26:42] 10Release-Engineering-Team, 10MW-on-K8s, 10serviceops, 10Kubernetes: Kubernetes credentials on deployment servers should be available to deployers, not all users - https://phabricator.wikimedia.org/T305729 (10JMeybohm) a:03JMeybohm I'll prepare the needed patches. /CC @thcipriani as this will alter the... [14:51:11] 10Beta-Cluster-Infrastructure, 10Data-Engineering, 10Data-Engineering-Kanban, 10Event-Platform: Upgrade event platform related VMs in deployment-prep to Debian bullsye (or buster) - https://phabricator.wikimedia.org/T304433 (10Ottomata) From @Majavah: > ./2022-03-31.log:61:[16:44:41] ottomata: I... [15:01:19] kart_ / Reedy: Tyler is fixing now [15:04:29] 10Release-Engineering-Team (🌱 Spring Cleaning — April 2022), 10Release, 10Train Deployments: 1.39.0-wmf.7 deployment blockers - https://phabricator.wikimedia.org/T305213 (10dancy) [15:05:56] dancy: thanks! [15:06:22] yay, thanks [15:09:18] (should be fixed now -- bot should be happy in future) [15:10:32] shouldn’t Monday, April 18 also be a no-deploy day? or is it not a holiday in the US? [15:10:44] dancy: Thanks! [15:11:01] ah, not a federal holiday https://en.wikipedia.org/wiki/Easter_Monday#United_States [15:11:04] nevermind then [15:15:17] heh [15:15:21] silly American holidays [15:21:26] gotta celebrate president and/or presidents instead ;) [15:24:17] 10Release-Engineering-Team, 10MW-on-K8s, 10serviceops, 10Kubernetes, 10Patch-For-Review: Kubernetes credentials on deployment servers should be available to deployers, not all users - https://phabricator.wikimedia.org/T305729 (10thcipriani) >>! In T305729#7845086, @JMeybohm wrote: > I'll prepare the need... [15:32:25] yeah, the US doesn't Easter Monday [15:33:10] you're missing out [15:33:18] (on an extra day to eat chocolate) [15:33:21] :D [15:34:30] any day can be a day to eat chocolate if you're dedicated. [15:35:11] but I suppose that chocolate isn't supplied by a rabbit (although as I'm typing this, I realize that might be an American thing--the easter bunny) [15:36:37] guess that started as a German thing (TIL) https://en.wikipedia.org/wiki/Easter_Bunny [15:43:25] “The idea that a hare could reproduce without loss of virginity led to an association with the Virgin Mary” ಠ_ಠ [16:22:25] 10GitLab, 10Security-Team, 10Security: Enabling CORS for raw file URLs - https://phabricator.wikimedia.org/T305700 (10Reedy) [16:23:44] 10GitLab, 10Release-Engineering-Team, 10SecTeam-Processed, 10Security: Enabling CORS for raw file URLs - https://phabricator.wikimedia.org/T305700 (10sbassett) Tagging #release-engineering-team for review. I think there's maybe two security questions here: # Is Wikimedia's Gitlab installation designed t... [16:40:48] hello! PET have a service we'd like to add to the integration configs, would it be possible for someone to have a look at https://gerrit.wikimedia.org/r/c/integration/config/+/777872 whenever you have the time please? Thanks! [16:42:21] hnowlan: Taking a look [16:43:16] hnowlan: Are you available for testing post-merge ? [16:49:18] yep! [16:50:21] ok.. merging now. [16:50:27] (03CR) 10Ahmon Dancy: [C: 03+2] jjb: Define test pipeline for image-suggestions [integration/config] - 10https://gerrit.wikimedia.org/r/777872 (https://phabricator.wikimedia.org/T303408) (owner: 10Eevans) [16:52:26] (03CR) 10jerkins-bot: [V: 04-1] jjb: Define test pipeline for image-suggestions [integration/config] - 10https://gerrit.wikimedia.org/r/777872 (https://phabricator.wikimedia.org/T303408) (owner: 10Eevans) [16:55:40] (03CR) 10Ahmon Dancy: "This might work better if split into two commits (one for jjb/project-pipelines.yaml and one for layout.yaml)" [integration/config] - 10https://gerrit.wikimedia.org/r/777872 (https://phabricator.wikimedia.org/T303408) (owner: 10Eevans) [17:03:52] good to know, thanks [17:56:14] 10Release-Engineering-Team (Radar), 10Scap, 10MediaWiki-Internationalization, 10Performance-Team: Use static php array files for l10n cache at WMF (instead of CDB) - https://phabricator.wikimedia.org/T99740 (10Krinkle) [20:32:32] 10Release-Engineering-Team (Next), 10Security-Team: Determine a better way to track Wikimedia production security patches - https://phabricator.wikimedia.org/T295925 (10sbassett) @thcipriani - so would this be a manual process? Where we look at T276237 (which is hopefully up-to-date) and copy relevant paths/p... [20:35:29] 10GitLab (CI & Job Runners), 10serviceops: upgrade gitlab-runners to bullseye - https://phabricator.wikimedia.org/T297659 (10Dzahn) After [[ https://gerrit.wikimedia.org/r/c/operations/puppet/+/779099 | fixing a minor race condition ]] you can now apply `profile::gitlab::runner` to a new instance and puppet ap... [20:40:56] 10GitLab (CI & Job Runners), 10serviceops: upgrade gitlab-runners to bullseye - https://phabricator.wikimedia.org/T297659 (10Dzahn) 2 more buster instances removed and replaced with new bullseye instances. Added tags to the runners list to make it more clear what is what. There are some test instance entries... [20:43:59] 10GitLab (CI & Job Runners), 10serviceops: upgrade gitlab-runners to bullseye - https://phabricator.wikimedia.org/T297659 (10Dzahn) p:05Triage→03High priority is High if it means "are you currently working on it" and Medium if it means "how important is it". I always disagree with Andre which one it is tho... [21:14:06] 10GitLab (CI & Job Runners), 10Release-Engineering-Team, 10Security Team AppSec, 10Security-Team, and 3 others: Evaluate and confirm potential licensing issues for gitlab appsec pipeline tools - https://phabricator.wikimedia.org/T304737 (10sbassett) >>! In T304737#7842276, @Legoktm wrote: > Sorry about the... [21:24:27] 10Phabricator, 10Project-Admins, 10Release-Engineering-Team, 10Security-Team, 10Security: Move the #acl_security_volunteer policy outside of #acl_security - https://phabricator.wikimedia.org/T305890 (10sbassett) [23:55:46] (03PS1) 10Zabe: zuul: add ConfirmEdit as phan dependency for CentralAuth [integration/config] - 10https://gerrit.wikimedia.org/r/779141 [23:56:33] (03PS2) 10Zabe: zuul: add ConfirmEdit as phan dependency for CentralAuth [integration/config] - 10https://gerrit.wikimedia.org/r/779141