[00:47:18] 10Continuous-Integration-Config, 10MediaWiki-Core-Tests, 10ProofreadPage, 10wikidiff2, and 3 others: New wikidiff2 version has broken ProofreadPage's PageSlotDiffRendererTest::testGetDiff and MW's REST API DiffCompare test - https://phabricator.wikimedia.org/T292676 (10Zabe) [00:47:38] 10Release-Engineering-Team, 10translatewiki.net, 10I18n: L10n-bot is using gate-and-submit, not gate-and-submit-l10n - https://phabricator.wikimedia.org/T291853 (10Zabe) [00:48:20] 10Gerrit: Registered users can't read labs/private while anonymous users can - https://phabricator.wikimedia.org/T290102 (10Zabe) [00:48:24] 10Beta-Cluster-Infrastructure: COPYING and CREDITS give 403 on beta cluster - https://phabricator.wikimedia.org/T288838 (10Zabe) [00:48:44] 10Beta-Cluster-Infrastructure: Approve Oauth2 consumer registration - https://phabricator.wikimedia.org/T288453 (10Zabe) [01:20:41] 10Beta-Cluster-Infrastructure: Global developer for Zabe on beta - https://phabricator.wikimedia.org/T281239 (10Zabe) [01:20:53] 10Phabricator: Add Zabe to #Triagers - https://phabricator.wikimedia.org/T279012 (10Zabe) [01:21:01] 10Project-Admins, 10User-Kizule: Create User-Zabe project - https://phabricator.wikimedia.org/T276719 (10Zabe) [01:21:15] 10phabricator maintenance bot, 10User-Ladsgroup: Remove #Patch-For-Review when patch is abandoned in Gerrit - https://phabricator.wikimedia.org/T276390 (10Zabe) [01:26:11] 10Release-Engineering-Team (Development services), 10Release-Engineering-Team-TODO, 10phabricator maintenance bot, 10GerritBot, 10Patch-For-Review: GerritBot doesn't add #Patch-for-review to restored patches - https://phabricator.wikimedia.org/T277597 (10Zabe) [01:41:06] 10phabricator maintenance bot: phabricator maintenance bot creates post-cretion tasks with weird edit policy - https://phabricator.wikimedia.org/T305998 (10Zabe) [06:10:42] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLabsperiment), 10User-brennen: Mirror all active Gerrit repositories to GitLab instance - https://phabricator.wikimedia.org/T305984 (10Aklapper) Could you clarify if this task is about repos that are already marked as read-only in Gerrit itself (th... [06:11:13] 10phabricator maintenance bot: phabricator maintenance bot creates post-creation tasks with restricted edit policy - https://phabricator.wikimedia.org/T305998 (10Aklapper) [06:14:36] 10Phabricator: De-link my aodit@wikimedia.org staff email from personal volunteer profile - https://phabricator.wikimedia.org/T305919 (10Aklapper) @Dzahn: Makes total sense for that "email address for yet another Phab account" aspect (and would mean getting Phab notifications from two Phab accounts on the same e... [06:58:18] (03CR) 10Robert Vogel: Switch to `-composer` tests for Tuleap* repos (032 comments) [integration/config] - 10https://gerrit.wikimedia.org/r/775786 (owner: 10Robert Vogel) [06:58:24] (03PS2) 10Robert Vogel: Switch to `-composer` tests for Tuleap* repos [integration/config] - 10https://gerrit.wikimedia.org/r/775786 [08:28:27] 10Project-Admins: Requests for addition to the #acl*Project-Admins group (in comments) - https://phabricator.wikimedia.org/T706 (10ItamarWMDE) @Aklapper thank you! [08:34:51] 10Release-Engineering-Team (🌱 Spring Cleaning β€” April 2022), 10dev-images, 10mwcli, 10Patch-For-Review: Apache docker image strips Authorization header - https://phabricator.wikimedia.org/T305143 (10Addshore) >>! In T305143#7849783, @Stashbot wrote: > {nav icon=file, name=Mentioned in SAL (#wikimedia-relen... [08:39:15] 10Release-Engineering-Team, 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10JMeybohm) a:03JMeybohm [08:46:58] 10Release-Engineering-Team, 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10JMeybohm) 4.6.1 rolled out to canaries. `scap pull`works as usual, `cd /srv/deployment/restbase/deploy/; scap deploy --environment dev-cluster` feels way(!) slower then the last times I... [08:47:14] 10Release-Engineering-Team, 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10JMeybohm) 05Openβ†’03Stalled [08:48:56] (03CR) 10Jaime Nuche: [C: 03+1] "LGTM, just a couple of questions." [tools/scap] - 10https://gerrit.wikimedia.org/r/779507 (owner: 10Ahmon Dancy) [08:52:30] 10Beta-Cluster-Infrastructure, 10Abstract Wikipedia team, 10Patch-For-Review: Create a Beta Cluster version of Wikifunctions.org - https://phabricator.wikimedia.org/T284162 (10ori) @Jdforrester-WMF anything left to do here? [09:09:11] 10Beta-Cluster-Infrastructure, 10Abstract Wikipedia team, 10Patch-For-Review: Create a Beta Cluster version of Wikifunctions.org - https://phabricator.wikimedia.org/T284162 (10Jdforrester-WMF) >>! In T284162#7850715, @ori wrote: > @Jdforrester-WMF anything left to do here? Sadly, yes. First I need to re-jig... [09:17:19] 10Release-Engineering-Team, 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10jnuche) @JMeybohm I'll take a look. What host(s) did you run `scap deploy --environment dev-cluster` on? [09:18:59] (03PS17) 10Jeena Huneidi: backport: compare fetched commits with backports [tools/scap] - 10https://gerrit.wikimedia.org/r/773897 (https://phabricator.wikimedia.org/T295495) [09:19:14] 10Release-Engineering-Team, 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10JMeybohm) >>! In T305949#7850762, @jnuche wrote: > @JMeybohm I'll take a look. What host(s) did you run `scap deploy --environment dev-cluster` on? deploy1002.eqiad.wmnet [09:21:03] (03CR) 10Jeena Huneidi: "I still need to do some work/testing on the submodules part." [tools/scap] - 10https://gerrit.wikimedia.org/r/773897 (https://phabricator.wikimedia.org/T295495) (owner: 10Jeena Huneidi) [09:31:55] 10Release-Engineering-Team, 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10jnuche) The deploy to canaries and subsequent rollback took me less than 3mins: ` 09:24:19 Finished deploy [restbase/deploy@627f7d7] (dev-cluster) (duration: 02m 51s) ` How long did it... [10:17:28] 10Release-Engineering-Team (Development services), 10Release-Engineering-Team-TODO, 10phabricator maintenance bot, 10GerritBot: GerritBot doesn't add #Patch-for-review to restored patches - https://phabricator.wikimedia.org/T277597 (10Zabe) [11:02:25] (03CR) 10Jaime Nuche: [C: 03+1] "Very nice fix." [tools/scap] - 10https://gerrit.wikimedia.org/r/779559 (https://phabricator.wikimedia.org/T305466) (owner: 10Ahmon Dancy) [11:07:16] 10Phabricator: De-link my aodit@wikimedia.org staff email from personal volunteer profile - https://phabricator.wikimedia.org/T305919 (10Astuthiodit_1) Thank you so much Everyone for trying to assist me, any chance I can set up time with you to troubleshoot and resolve my problem, thank you so much. Please let m... [12:02:46] 10Phabricator: De-link my aodit@wikimedia.org staff email from personal volunteer profile - https://phabricator.wikimedia.org/T305919 (10Aklapper) @Astuthiodit_1 : Please describe which underlying problem you would like to solve, and which instructions above are unclear after performing which steps in which syst... [13:04:19] 10Continuous-Integration-Config, 10Toolhub, 10Documentation: Publish docs on doc.wikimedia.org - https://phabricator.wikimedia.org/T305914 (10Slst2020) >>! In T305914#7848631, @bd808 wrote: > The technically "simple" method of getting the docs out of the container would be to mount a local directory on the r... [13:21:03] 10Continuous-Integration-Config, 10MW-1.35-release, 10MW-1.36-release, 10MW-1.37-release, and 2 others: Make PHP 8.0 voting on MW 1.35, 1.36, 1.37, 1.38 - https://phabricator.wikimedia.org/T274965 (10MarkAHershberger) This is not a blocker. [13:38:11] 10Release-Engineering-Team, 10MediaWiki-Release-Tools: Inconsistent casing of UTC - https://phabricator.wikimedia.org/T306028 (10Reedy) [13:38:19] 10Release-Engineering-Team, 10MediaWiki-Release-Tools: Inconsistent casing of UTC - https://phabricator.wikimedia.org/T306028 (10Reedy) p:05Triageβ†’03Lowest [13:39:45] 10Release-Engineering-Team, 10MediaWiki-Release-Tools: Inconsistent casing of UTC in deployment calendar on wikitech - https://phabricator.wikimedia.org/T306028 (10Reedy) [13:56:07] 10Deployments, 10Release-Engineering-Team (Radar), 10serviceops, 10Sustainability (Incident Followup), 10User-jijiki: Remove provisioning for 'mwscript', 'foreachwikiindblist' etc from deployment host - https://phabricator.wikimedia.org/T253822 (10Krinkle) p:05Triageβ†’03Medium a:03dancy [14:56:54] (03CR) 10Ahmon Dancy: Add utils.temp_to_permanent_file (032 comments) [tools/scap] - 10https://gerrit.wikimedia.org/r/779507 (owner: 10Ahmon Dancy) [15:15:33] 10Release-Engineering-Team, 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10jnuche) @JMeybohm so I just learned we are indeed still supporting Scap3, but it hasn't seen any active development in a while. In particular, there haven't been any changes since the la... [15:24:57] 10Release-Engineering-Team, 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10JMeybohm) 05Stalledβ†’03In progress >>! In T305949#7851774, @jnuche wrote: > Would you be ok with going ahead with the deploy? We can take a deeper look in the future if the issue pers... [15:30:16] 10Beta-Cluster-Infrastructure, 10serviceops: Serve beta cluster on PHP 7.4 by default - https://phabricator.wikimedia.org/T306042 (10Reedy) [15:37:13] 10Beta-Cluster-Infrastructure, 10serviceops: Serve beta cluster via PHP 7.4 by default - https://phabricator.wikimedia.org/T306042 (10Reedy) [15:51:51] 10Release-Engineering-Team (Next), 10Scap, 10Patch-For-Review: scap proxies are CPU and/or network bound - https://phabricator.wikimedia.org/T305466 (10Majavah) Sort-of unrelated drive-by question: why are codfw hosts are using a proxy in the 'wrong' datacenter? Ideally only the deploy1002->deploy2002 sync w... [15:53:01] 10Release-Engineering-Team (🌱 Spring Cleaning β€” April 2022), 10Patch-For-Review, 10Release, 10Train Deployments: 1.39.0-wmf.7 deployment blockers - https://phabricator.wikimedia.org/T305213 (10RhinosF1) [15:54:07] dancy, jnuche: around? [15:54:41] 10Beta-Cluster-Infrastructure, 10Citoid, 10Editing-team: Upgrade deployment-docker-citoid01 host to Buster - https://phabricator.wikimedia.org/T306049 (10Jdforrester-WMF) [15:54:50] o/ [15:55:02] 10Beta-Cluster-Infrastructure, 10CX-cxserver, 10Language-Team: Upgrade deployment-docker-cxserver01 host to Buster - https://phabricator.wikimedia.org/T306050 (10Jdforrester-WMF) [15:55:04] dancy: has that issue been seen in wmf? [15:55:18] 10Beta-Cluster-Infrastructure, 10Math, 10Mathoid, 10Platform Engineering: Upgrade deployment-docker-mathoid01 host to Buster - https://phabricator.wikimedia.org/T306051 (10Jdforrester-WMF) [15:55:18] that i just tagged a blocker [15:55:23] or only translatewiki [15:55:32] * RhinosF1 does not find master helpful [15:55:38] Taking a look [15:55:59] 10Beta-Cluster-Infrastructure, 10Platform Engineering, 10RESTBase: Upgrade deployment-restbase03 host to Buster - https://phabricator.wikimedia.org/T306052 (10Jdforrester-WMF) [15:56:15] 10Beta-Cluster-Infrastructure, 10Machine-Learning-Team, 10ORES: Upgrade deployment-ores01 host to Buster - https://phabricator.wikimedia.org/T306053 (10Jdforrester-WMF) [15:56:38] 10Beta-Cluster-Infrastructure, 10Wikidata-Query-Service: Upgrade deployment-wdqs01 host to Buster - https://phabricator.wikimedia.org/T306054 (10Jdforrester-WMF) [15:56:52] 10Beta-Cluster-Infrastructure, 10Wikifeeds: Upgrade deployment-wikifeeds01 host to Buster - https://phabricator.wikimedia.org/T306055 (10Jdforrester-WMF) [15:57:48] zabe: you were last to touch that code [15:58:26] lemme look [15:58:47] 10Beta-Cluster-Infrastructure, 10Release-Engineering-Team (Radar): Migrate deployment-prep away from Debian Stretch to Buster/Bullseye - https://phabricator.wikimedia.org/T278641 (10Jdforrester-WMF) [15:58:47] dancy: it's migration code so not sure if enabled in wmf prod [15:58:55] zabe: will likely be able to tell us [15:59:07] ok. I'll wait for word from yall. [15:59:33] writing to that column is only enabled on two very tiny wikis [15:59:46] guwwiki and shnwikivoyage [15:59:47] zabe: which [15:59:49] oh [16:00:18] zabe: if it impacts this train, could we turn it off? [16:00:25] or just leave [16:02:59] ok, I see it on prod, lets stop writing for now and I can take a look [16:04:44] 10Release-Engineering-Team, 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10jnuche) @JMeybohm thank you :) [16:05:12] dancy, could you deploy https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/779906/ ? [16:07:24] zabe: I'm starting a meeting right now. You might try to raise urbanecm in #-operations [16:07:31] otherwise I can get it going in about 45 minutes. [16:07:38] Reedy already does it, but thanks [16:08:01] ok [16:14:31] 10Release-Engineering-Team (🌱 Spring Cleaning β€” April 2022), 10Patch-For-Review, 10Release, 10Train Deployments: 1.39.0-wmf.7 deployment blockers - https://phabricator.wikimedia.org/T305213 (10Zabe) [16:21:42] 10Release-Engineering-Team (Radar), 10MediaWiki-Release-Tools: Inconsistent casing of UTC in deployment calendar on wikitech - https://phabricator.wikimedia.org/T306028 (10thcipriani) [16:21:53] 10Release-Engineering-Team (Seen), 10MediaWiki-Release-Tools: Inconsistent casing of UTC in deployment calendar on wikitech - https://phabricator.wikimedia.org/T306028 (10thcipriani) [16:22:41] 10Release-Engineering-Team (Radar), 10Scap, 10serviceops: Deploy Scap version 4.6.1 - https://phabricator.wikimedia.org/T305949 (10thcipriani) [16:24:59] 10GitLab (Administration, Settings & Policy), 10Release-Engineering-Team (Radar), 10Upstream, 10User-brennen: GitLab group permissions are not inherited by sub-groups for groups of users invited to the parent repo - https://phabricator.wikimedia.org/T300939 (10brennen) [16:25:09] 10Phabricator, 10Project-Admins, 10Release-Engineering-Team (Doing), 10Security-Team, 10Security: Move the #acl_security_volunteer policy outside of #acl_security - https://phabricator.wikimedia.org/T305890 (10thcipriani) a:03thcipriani I'll take a look at how to even do this :) [16:25:16] 10Phabricator, 10Project-Admins, 10Release-Engineering-Team (Doing), 10Security-Team, 10Security: Move the #acl_security_volunteer policy outside of #acl_security - https://phabricator.wikimedia.org/T305890 (10thcipriani) [16:26:25] 10GitLab (Project Migration), 10Release-Engineering-Team (🌱 Spring Cleaning β€” April 2022), 10Community-Tech: Create new GitLab project group: commtech - https://phabricator.wikimedia.org/T304580 (10brennen) [16:26:37] 10Release-Engineering-Team (Radar), 10MW-on-K8s, 10serviceops, 10Kubernetes, 10Patch-For-Review: Kubernetes credentials on deployment servers should be available to deployers, not all users - https://phabricator.wikimedia.org/T305729 (10thcipriani) [16:32:45] 10Continuous-Integration-Config, 10Release-Engineering-Team (Priority Backlog πŸ“₯): Apache docker image used in CI strips Authorization header - https://phabricator.wikimedia.org/T305709 (10thcipriani) [16:35:09] 10Continuous-Integration-Config, 10Release-Engineering-Team (Priority Backlog πŸ“₯): Apache docker image used in CI strips Authorization header - https://phabricator.wikimedia.org/T305709 (10dancy) Adding "CGIPassAuth On" to the Apache config should take care of this. The solution in T305143 will also work but t... [16:35:17] 10GitLab, 10Release-Engineering-Team (Priority Backlog πŸ“₯), 10SecTeam-Processed, 10Security: Enabling CORS for raw file URLs - https://phabricator.wikimedia.org/T305700 (10thcipriani) [16:35:43] 10Continuous-Integration-Config, 10Release-Engineering-Team (Priority Backlog πŸ“₯): Apache docker image used in CI strips Authorization header - https://phabricator.wikimedia.org/T305709 (10dancy) T294780 is another hit for the same kind of problem. [16:36:11] 10GitLab (Administration, Settings & Policy), 10Release-Engineering-Team (Priority Backlog πŸ“₯), 10Product-Analytics, 10Privacy, 10User-brennen: Request for Private repos to be enabled - https://phabricator.wikimedia.org/T305082 (10thcipriani) [16:36:54] 10Continuous-Integration-Infrastructure, 10Release-Engineering-Team (Radar), 10serviceops: docker-report-releng failing on multiple image tags because of certificate validation error - https://phabricator.wikimedia.org/T304875 (10thcipriani) [16:37:55] 10GitLab (CI & Job Runners), 10Release-Engineering-Team (Radar), 10Security Team AppSec, 10Security-Team, and 3 others: Evaluate and confirm potential licensing issues for gitlab appsec pipeline tools - https://phabricator.wikimedia.org/T304737 (10thcipriani) [16:39:06] 10Release-Engineering-Team (Doing), 10Scap, 10User-brennen: scap deploy-promote fails on git push - https://phabricator.wikimedia.org/T304557 (10thcipriani) a:03jnuche [16:39:10] 10Release-Engineering-Team (Doing), 10Scap, 10User-brennen: scap deploy-promote fails on git push - https://phabricator.wikimedia.org/T304557 (10thcipriani) p:05Triageβ†’03Medium [16:41:25] 10Release-Engineering-Team (Priority Backlog πŸ“₯), 10MW-on-K8s, 10Release Pipeline: Display mergeable status in scap backport --list output - https://phabricator.wikimedia.org/T303967 (10thcipriani) [16:42:43] 10Release-Engineering-Team (Priority Backlog πŸ“₯), 10Scap, 10Infrastructure-Foundations, 10serviceops, 10Patch-For-Review: Use scap to deploy itself to scap targets - https://phabricator.wikimedia.org/T303559 (10thcipriani) [16:42:51] 10Beta-Cluster-Infrastructure, 10Wikidata, 10Wikidata-Query-Service, 10wdwb-tech: Upgrade deployment-wdqs01 host to Buster - https://phabricator.wikimedia.org/T306054 (10Lucas_Werkmeister_WMDE) Hm, my understanding was that neither the Beta cluster nor Test Wikidata have a working query service. I can’t fi... [16:43:53] 10Release-Engineering-Team (Next), 10Scap: scap: add progress reporting to php-fpm-restarts - https://phabricator.wikimedia.org/T302631 (10thcipriani) [16:45:32] 10Release-Engineering-Team, 10Scap, 10MW-on-K8s, 10serviceops: Deploy MediaWiki images for kubernetes from the deployment servers - https://phabricator.wikimedia.org/T302539 (10thcipriani) [16:45:40] 10Release-Engineering-Team (Radar), 10Infrastructure-Foundations, 10SRE, 10SRE-Access-Requests, 10serviceops: Need a service account on deploy servers - https://phabricator.wikimedia.org/T303857 (10thcipriani) [16:47:00] 10Release-Engineering-Team (Radar), 10Scap, 10MW-on-K8s, 10serviceops: Deploy MediaWiki images for kubernetes from the deployment servers - https://phabricator.wikimedia.org/T302539 (10thcipriani) 05Openβ†’03Stalled Stalled waiting on the service account [16:47:09] question: is there an easy way to figure out a PHID of a particular phab workboard column? I need the PHID of the 'vps project' column on https://phabricator.wikimedia.org/project/view/5649/ for the mass task creation script [16:47:36] 10Phabricator (Upstream), 10Release-Engineering-Team (Seen), 10serviceops-radar, 10Upstream: Consider migrating from Phabricator to Phorge once that new upstream is ready for such a migration - https://phabricator.wikimedia.org/T302528 (10thcipriani) [16:47:56] taavi: You can futz around with the API (via the phab interface) [16:47:59] 10Release-Engineering-Team, 10Scap, 10serviceops: Set scap minimum python version to 3.7 - https://phabricator.wikimedia.org/T302086 (10thcipriani) [16:48:03] But they really don't make it easy to find out/expose [16:48:10] Andre seems to have a knack of doing it [16:48:43] the six bottommost links in the pencil menu seem to contain a second numeric ID, not sure if that’s the one you’re looking for [16:48:53] e.g. https://phabricator.wikimedia.org/project/board/5649/viewquery/21647/ [16:48:59] 10Release-Engineering-Team (Radar), 10Scap, 10serviceops: Set scap minimum python version to 3.7 - https://phabricator.wikimedia.org/T302086 (10thcipriani) 05Openβ†’03Stalled [16:49:04] nope, PHIDs are magic unique strings like PHID-PCOL-jf7qnlr25fkqqfpa2qph [16:49:05] it'll be a PHID-123456 type thing [16:49:07] ah [16:49:33] PHID-PROJ-bjzu2eyaxhzz5ngmznjo [16:49:53] pencil menu > new task > inspect element on the pre-filled Tags value > hidden input with that value [16:50:05] 10Release-Engineering-Team (Seen), 10User-AKlapper: Update [[mw:Release_Manager_(Wikimedia)]] - https://phabricator.wikimedia.org/T301971 (10thcipriani) Adding @greg and @kchapman for visibility [16:50:07] dunno if that qualifies as β€œeasy” but maybe better than API at least [16:50:37] that's the id of the project, not the column [16:50:39] yeah, but he wants the column, not the project :) [16:50:45] isn't the column PHID-PCOL-pvw34iuonnos4m5hvjqb here? [16:50:46] found it via conduit, PHID-PCOL-pvw34iuonnos4m5hvjqb [16:50:52] (why it isn't just embedded in the HTML) [16:50:58] it was visible in Lucas_WMDE query above [16:51:14] when going to https://phabricator.wikimedia.org/maniphest/query/P9PzXlXI1VkM/#R [16:51:22] you see the id in the field [16:51:34] Reedy: sorry, I thought it would be the column [16:51:37] in the 'Columns' field [16:51:48] since I thought I remembered that this new task menu is able to create new tasks in the right column directly [16:51:50] 10Phabricator, 10Release-Engineering-Team (Seen), 10Wikimedia-Phabricator-Extensions, 10Developer Productivity: Move line delta to after "Subject" column in Phabricator's Gerrit patch list - https://phabricator.wikimedia.org/T301025 (10brennen) [16:51:55] (but only if you don’t open that link in a new tab) [16:52:32] let’s send a feature request to Phorge to make it more easily availabel? ;) [16:52:36] *available [16:53:02] note that you can see the object type in the PHID.. yours was PHID-PROJ-... while columns are PHID-PCOL-... [16:53:41] ah, I see [16:55:24] anyhow, I'm about to start creating tasks for each of the 54 projects that still have stretch instances [16:55:36] spaaaaaam [17:03:47] 10Phabricator, 10Project-Admins, 10Release-Engineering-Team (Doing), 10Security-Team, 10Security: Move the #acl_security_volunteer policy outside of #acl_security - https://phabricator.wikimedia.org/T305890 (10Aklapper) AFAIK we cannot convert subprojects into projects (and the [other way round is also v... [17:04:41] 10Beta-Cluster-Infrastructure, 10Data-Engineering, 10Data-Engineering-Kanban, 10Event-Platform: Upgrade event platform related VMs in deployment-prep to Debian bullsye (or buster) - https://phabricator.wikimedia.org/T304433 (10Ottomata) [17:04:41] 10Beta-Cluster-Infrastructure, 10Release-Engineering-Team (Radar): Migrate deployment-prep away from Debian Stretch to Buster/Bullseye - https://phabricator.wikimedia.org/T278641 (10Majavah) [17:04:54] 10Beta-Cluster-Infrastructure, 10Cloud-VPS (Debian Stretch Deprecation): Cloud VPS "deployment-prep" project Stretch deprecation - https://phabricator.wikimedia.org/T306068 (10Majavah) [17:05:22] 10Beta-Cluster-Infrastructure, 10Cloud-VPS (Debian Stretch Deprecation): Cloud VPS "deployment-prep" project Stretch deprecation - https://phabricator.wikimedia.org/T306068 (10Majavah) [17:10:01] 10Gerrit, 10Phabricator, 10serviceops, 10Cloud-VPS (Debian Stretch Deprecation): Cloud VPS "devtools" project Stretch deprecation - https://phabricator.wikimedia.org/T306069 (10Dzahn) [17:10:45] 10Gerrit, 10Phabricator, 10serviceops, 10Cloud-VPS (Debian Stretch Deprecation): Cloud VPS "devtools" project Stretch deprecation - https://phabricator.wikimedia.org/T306069 (10Dzahn) p:05Mediumβ†’03High raising priority because "may be deleted within 2 weeks" is soon and impactful [17:20:52] 10Phabricator: Tasks created via Phabricator APIs have restricted edit policy - https://phabricator.wikimedia.org/T305998 (10Majavah) [17:21:28] 10Phabricator: Tasks created via Phabricator APIs have restricted edit policy - https://phabricator.wikimedia.org/T305998 (10Majavah) Not limited to the maintenance bot, the Cloud VPS stretch deprecation tasks created by @StrikerBot have the same issue. [17:34:01] 10Phabricator: Tasks created via Phabricator APIs have restricted edit policy - https://phabricator.wikimedia.org/T305998 (10Majavah) Found it. The default is coming from https://phabricator.wikimedia.org/applications/view/PhabricatorManiphestApplication/ and can be adjusted there by a Phab admin. [17:35:29] 10Gerrit, 10Phabricator, 10serviceops, 10Cloud-VPS (Debian Stretch Deprecation): Cloud VPS "devtools" project Stretch deprecation - https://phabricator.wikimedia.org/T306069 (10Zabe) [17:35:42] 10Beta-Cluster-Infrastructure, 10Cloud-VPS (Debian Stretch Deprecation): Cloud VPS "deployment-prep" project Stretch deprecation - https://phabricator.wikimedia.org/T306068 (10Zabe) [17:38:59] 10Phabricator: Tasks created via Phabricator APIs have restricted edit policy - https://phabricator.wikimedia.org/T305998 (10Zabe) >>! In T305998#7853089, @Majavah wrote: > Found it. The default is coming from https://phabricator.wikimedia.org/applications/view/PhabricatorManiphestApplication/ and can be adjuste... [17:52:46] 10Phabricator, 10Project-Admins, 10Release-Engineering-Team (Doing), 10Security-Team, 10Security: Move the #acl_security_volunteer policy outside of #acl_security - https://phabricator.wikimedia.org/T305890 (10thcipriani) a:05thciprianiβ†’03None >>! In T305890#7852924, @Aklapper wrote: > AFAIK we canno... [17:55:30] 10Phabricator, 10Project-Admins, 10Release-Engineering-Team (Doing), 10Security-Team, 10Security: Move the #acl_security_volunteer policy outside of #acl_security - https://phabricator.wikimedia.org/T305890 (10thcipriani) >>! In T305890#7852924, @Aklapper wrote: > (And it's not clear to me yet who/when... [18:01:45] 10Phabricator, 10Project-Admins, 10Release-Engineering-Team (Radar), 10Security-Team, 10Security: Move the #acl_security_volunteer policy outside of #acl_security - https://phabricator.wikimedia.org/T305890 (10thcipriani) [18:17:48] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLabsperiment), 10User-brennen: Mirror all active Gerrit repositories to GitLab instance - https://phabricator.wikimedia.org/T305984 (10thcipriani) [18:17:58] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLabsperiment), 10User-brennen: Mirror all active Gerrit repositories to GitLab instance - https://phabricator.wikimedia.org/T305984 (10thcipriani) [18:24:09] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLabsperiment), 10User-brennen: Mirror all active Gerrit repositories to GitLab instance - https://phabricator.wikimedia.org/T305984 (10thcipriani) >>! In T305984#7850549, @Aklapper wrote: > Could you clarify if this task is about repos that are alr... [18:28:28] (03PS2) 10Eevans: Add service pipeline entry for image-suggestions service [integration/config] - 10https://gerrit.wikimedia.org/r/779450 (https://phabricator.wikimedia.org/T303408) (owner: 10Hnowlan) [18:30:29] (03CR) 10jerkins-bot: [V: 04-1] Add service pipeline entry for image-suggestions service [integration/config] - 10https://gerrit.wikimedia.org/r/779450 (https://phabricator.wikimedia.org/T303408) (owner: 10Hnowlan) [18:31:28] (03PS2) 10Eevans: jjb: Define test pipeline for image-suggestions [integration/config] - 10https://gerrit.wikimedia.org/r/777872 (https://phabricator.wikimedia.org/T303408) [18:50:01] (03PS1) 10Ahmon Dancy: Revive install_requires in setup.py [tools/scap] - 10https://gerrit.wikimedia.org/r/779925 [20:21:45] (03PS2) 10Ahmon Dancy: Fix utils.find_nearest_host and its caller [tools/scap] - 10https://gerrit.wikimedia.org/r/779559 (https://phabricator.wikimedia.org/T305466) [20:25:19] 10Release-Engineering-Team (Next), 10Scap, 10Patch-For-Review: scap proxies are CPU and/or network bound - https://phabricator.wikimedia.org/T305466 (10dancy) @Majavah That is a very good question which I had to look deeper into today and make further fixes for. The explanation is in the updated commit mess... [20:30:36] (03CR) 10Zabe: Fix utils.find_nearest_host and its caller (031 comment) [tools/scap] - 10https://gerrit.wikimedia.org/r/779559 (https://phabricator.wikimedia.org/T305466) (owner: 10Ahmon Dancy) [20:32:50] (03CR) 10Ahmon Dancy: Fix utils.find_nearest_host and its caller (031 comment) [tools/scap] - 10https://gerrit.wikimedia.org/r/779559 (https://phabricator.wikimedia.org/T305466) (owner: 10Ahmon Dancy) [20:32:52] (03CR) 10Zabe: Fix utils.find_nearest_host and its caller (031 comment) [tools/scap] - 10https://gerrit.wikimedia.org/r/779559 (https://phabricator.wikimedia.org/T305466) (owner: 10Ahmon Dancy) [20:34:34] 10Release-Engineering-Team (Radar), 10Scap, 10MW-on-K8s, 10serviceops: Deploy MediaWiki images for kubernetes from the deployment servers - https://phabricator.wikimedia.org/T302539 (10dancy) [20:34:41] 10Release-Engineering-Team (Radar), 10Infrastructure-Foundations, 10SRE, 10SRE-Access-Requests, 10serviceops: Need a service account on deploy servers - https://phabricator.wikimedia.org/T303857 (10dancy) [20:34:58] 10Release-Engineering-Team (Radar), 10Scap, 10MW-on-K8s, 10serviceops: Deploy MediaWiki images for kubernetes from the deployment servers - https://phabricator.wikimedia.org/T302539 (10dancy) [20:35:01] 10Release-Engineering-Team (Radar), 10MW-on-K8s, 10serviceops, 10Kubernetes, 10Patch-For-Review: Kubernetes credentials on deployment servers should be available to deployers, not all users - https://phabricator.wikimedia.org/T305729 (10dancy) [20:35:36] 10Release-Engineering-Team (Radar), 10Infrastructure-Foundations, 10SRE, 10SRE-Access-Requests, 10serviceops: Need a service account on deploy servers for automated train pre-sync operations - https://phabricator.wikimedia.org/T303857 (10dancy) [20:38:03] 10Release-Engineering-Team (Radar), 10Scap, 10MW-on-K8s, 10serviceops: Deploy MediaWiki images for kubernetes from the deployment servers - https://phabricator.wikimedia.org/T302539 (10dancy) >>! In T302539#7852342, @thcipriani wrote: > Stalled waiting on the service account Correction: Waiting for T30572... [21:13:51] 10Phabricator, 10Project-Admins, 10Release-Engineering-Team (Radar), 10Security-Team, 10Security: Move the #acl_security_volunteer policy outside of #acl_security - https://phabricator.wikimedia.org/T305890 (10sbassett) Could we do something like: # Move the 7 Phab users mentioned above to #acl_security_... [22:32:22] (03PS1) 10Ahmon Dancy: sync-apaches: Include deploy servers as rsync sources [tools/scap] - 10https://gerrit.wikimedia.org/r/779962 (https://phabricator.wikimedia.org/T305466) [22:59:51] (03PS1) 10Arlolra: Make extension-quibble non-voting for parsoid [integration/config] - 10https://gerrit.wikimedia.org/r/779967 (https://phabricator.wikimedia.org/T305931) [23:00:45] (03CR) 10Ahmon Dancy: backport: compare fetched commits with backports (034 comments) [tools/scap] - 10https://gerrit.wikimedia.org/r/773897 (https://phabricator.wikimedia.org/T295495) (owner: 10Jeena Huneidi) [23:02:04] (03CR) 10jerkins-bot: [V: 04-1] Make extension-quibble non-voting for parsoid [integration/config] - 10https://gerrit.wikimedia.org/r/779967 (https://phabricator.wikimedia.org/T305931) (owner: 10Arlolra) [23:02:43] (03PS1) 10Mstyles: zuul: Invoke publish pipeline for security-api [integration/config] - 10https://gerrit.wikimedia.org/r/779969 [23:04:30] (03CR) 10jerkins-bot: [V: 04-1] zuul: Invoke publish pipeline for security-api [integration/config] - 10https://gerrit.wikimedia.org/r/779969 (owner: 10Mstyles) [23:05:43] (03PS2) 10Mstyles: zuul: Invoke publish pipeline for security-api [integration/config] - 10https://gerrit.wikimedia.org/r/779969 (https://phabricator.wikimedia.org/T305723) [23:07:40] (03CR) 10jerkins-bot: [V: 04-1] zuul: Invoke publish pipeline for security-api [integration/config] - 10https://gerrit.wikimedia.org/r/779969 (https://phabricator.wikimedia.org/T305723) (owner: 10Mstyles) [23:08:53] (03PS2) 10Arlolra: Make extension-quibble non-voting for parsoid [integration/config] - 10https://gerrit.wikimedia.org/r/779967 (https://phabricator.wikimedia.org/T305931) [23:10:16] (03PS3) 10Mstyles: zuul: Invoke publish pipeline for security-api [integration/config] - 10https://gerrit.wikimedia.org/r/779969 (https://phabricator.wikimedia.org/T305723) [23:11:11] (03CR) 10jerkins-bot: [V: 04-1] Make extension-quibble non-voting for parsoid [integration/config] - 10https://gerrit.wikimedia.org/r/779967 (https://phabricator.wikimedia.org/T305931) (owner: 10Arlolra) [23:47:39] 10GitLab (Infrastructure), 10Release-Engineering-Team (Priority Backlog πŸ“₯), 10SecTeam-Processed, 10Security, 10Upstream: Enabling CORS for raw file URLs - https://phabricator.wikimedia.org/T305700 (10brennen) > Is Wikimedia's Gitlab installation designed to function as a CDN like github's? Or is that a p...