[00:00:49] (03PS2) 10Jeena Huneidi: layout.yaml: remove train-dev repo [integration/config] - 10https://gerrit.wikimedia.org/r/868203 (https://phabricator.wikimedia.org/T323225) [00:01:21] (03CR) 10Jeena Huneidi: layout.yaml: remove train-dev repo (032 comments) [integration/config] - 10https://gerrit.wikimedia.org/r/868203 (https://phabricator.wikimedia.org/T323225) (owner: 10Jeena Huneidi) [00:02:18] (03PS3) 10Jeena Huneidi: layout.yaml: remove train-dev repo [integration/config] - 10https://gerrit.wikimedia.org/r/868203 (https://phabricator.wikimedia.org/T323225) [00:33:29] is it just me or is zuul taking longer than normal to run tests (specifically for gate and submit)? [01:06:03] DannyS712: There are lots of graphs to stare at to convince yourself one way of the other -- https://grafana.wikimedia.org/d/000000321/zuul?orgId=1 [01:06:12] *or [01:29:59] 10Beta-Cluster-Infrastructure: Request administrator role for user "Kindrobot" on en.wikipedia.beta.wmflabs.org - https://phabricator.wikimedia.org/T325301 (10TheresNoTime) a:03TheresNoTime [01:38:46] 10Release-Engineering-Team (Seen), 10MW-on-K8s, 10SRE, 10Traffic, and 3 others: Serve production traffic via Kubernetes - https://phabricator.wikimedia.org/T290536 (10Quiddity) @Ladsgroup > Something along the lines: […] Perfect draft. Thank you. :) [[https://meta.wikimedia.org/wiki/Tech/News/2022/51|Add... [01:40:11] 10Beta-Cluster-Infrastructure: Request administrator role for user "Kindrobot" on en.wikipedia.beta.wmflabs.org - https://phabricator.wikimedia.org/T325301 (10TheresNoTime) 05Open→03Resolved I've added the [[ https://en.wikipedia.beta.wmflabs.org/w/index.php?title=Special:Log&logid=370352 | administrator ]]... [01:44:50] 10Beta-Cluster-Infrastructure: admin right to beta commons for testing uploads - https://phabricator.wikimedia.org/T323674 (10TheresNoTime) 05Open→03Resolved a:03TheresNoTime Appreciate this is a few weeks late, but this [[ https://commons.wikimedia.beta.wmflabs.org/w/index.php?title=Special:Log&logid=3550... [01:46:19] 10Beta-Cluster-Infrastructure: Add en.wikibooks in Beta Cluster import - https://phabricator.wikimedia.org/T281333 (10TheresNoTime) 05Open→03Declined [02:37:13] 10GitLab, 10Release-Engineering-Team, 10serviceops-collab: Align the GitLab runner tags - https://phabricator.wikimedia.org/T325069 (10demon) What if we used the provider-agnostic `public-cloud`? [02:43:36] 10GitLab, 10Release-Engineering-Team, 10serviceops-collab: Align the GitLab runner tags - https://phabricator.wikimedia.org/T325069 (10AntiCompositeNumber) That seems like a good idea, as it would also disambiguate from WMCS more clearly. [04:33:39] 10Beta-Cluster-Infrastructure: Replace deployment-prometheus02 - https://phabricator.wikimedia.org/T324782 (10TheresNoTime) Ended up being `deployment-prometheus05` because puppet. [08:39:17] 10Beta-Cluster-Infrastructure, 10Wikidata, 10Wikidata-Query-Service, 10wdwb-tech: deployment-wdqs01 Puppet failure - https://phabricator.wikimedia.org/T296959 (10Gehel) 05Open→03Resolved a:03Gehel This instance has been deleted [09:27:44] 10Scap: Scap get stuck when trying to deploy a patch chain (from latest patch) - https://phabricator.wikimedia.org/T325074 (10jeena) I did some more investigation and I think the deployment couldn't continue since it was searching for a commit with "Change-Id: I39ab54ca6e9f9a6a58b59cdd6feea07638fc908f", but the... [09:31:55] (03PS1) 10David Caro: tox: add tox-bullseye and tox-poetry-bullseye images [integration/config] - 10https://gerrit.wikimedia.org/r/868624 [09:35:02] I sent a patch to add tox-bullseye and tox-poetry-bullseye ci images, I would appreciate some reviews as I'm almost sure I'm missing something xd [09:47:24] 10GitLab (CI & Job Runners), 10Release-Engineering-Team (Priority Backlog 📥), 10serviceops-collab, 10Patch-For-Review: Move cloud runner CI jobs to trusted runners - https://phabricator.wikimedia.org/T322344 (10MoritzMuehlenhoff) >>! In T322344#8471866, @dduvall wrote: > I'm thinking the best course for us... [09:54:48] 10GitLab (CI & Job Runners), 10Release-Engineering-Team (Priority Backlog 📥), 10serviceops-collab, 10Patch-For-Review: Move cloud runner CI jobs to trusted runners - https://phabricator.wikimedia.org/T322344 (10Jelto) >>! In T322344#8473349, @MoritzMuehlenhoff wrote: >>>! In T322344#8471866, @dduvall wrote... [10:15:50] (03CR) 10Hashar: [C: 03+2] "Excellent." [integration/config] - 10https://gerrit.wikimedia.org/r/868203 (https://phabricator.wikimedia.org/T323225) (owner: 10Jeena Huneidi) [10:17:38] (03Merged) 10jenkins-bot: layout.yaml: remove train-dev repo [integration/config] - 10https://gerrit.wikimedia.org/r/868203 (https://phabricator.wikimedia.org/T323225) (owner: 10Jeena Huneidi) [10:27:27] 10GitLab (Misc), 10Release-Engineering-Team (Seen): Gerritlab: Stacked pull requests - https://phabricator.wikimedia.org/T300819 (10jbond) [10:27:50] (03CR) 10Hashar: [V: 03+2 C: 03+2] gitlab: train-dev has migrated to gitlab (031 comment) [tools/train-dev] - 10https://gerrit.wikimedia.org/r/868202 (https://phabricator.wikimedia.org/T323225) (owner: 10Jeena Huneidi) [10:28:09] 10GitLab (Misc), 10Release-Engineering-Team (Seen): Gerritlab: Stacked pull requests - https://phabricator.wikimedia.org/T300819 (10jbond) leaving this here as it may also be useful https://olivernguyen.io/w/sapling/. disclaimer i have not tested myself [10:29:51] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLab III: GitLab in LA 🪃), 10MediaWiki Train Development Environment, 10Patch-For-Review: Migrate train-dev to GitLab - https://phabricator.wikimedia.org/T323225 (10hashar) I have marked the repo read-only in Gerrit and adjusted its description to... [11:36:37] 10GitLab: Import Merge Requests from GitHub read-only mirrored repos into GitLab - https://phabricator.wikimedia.org/T325106 (10Aklapper) [11:36:39] 10GitLab, 10Wikimedia-GitHub, 10Security: Support Github login in Gitlab - https://phabricator.wikimedia.org/T325235 (10Aklapper) [12:01:48] (03CR) 10Zfilipin: WIP Run Selenium tests targeting production (031 comment) [integration/config] - 10https://gerrit.wikimedia.org/r/856618 (https://phabricator.wikimedia.org/T303739) (owner: 10Zfilipin) [12:33:02] (03CR) 10Zfilipin: [C: 03+2] Run selenium tests for extensions against test2wiki. (031 comment) [integration/config] - 10https://gerrit.wikimedia.org/r/866548 (https://phabricator.wikimedia.org/T303739) (owner: 10Dom Walden) [12:46:12] 10Continuous-Integration-Config, 10Codex, 10Design-Systems-Team (Design-Systems-Sprint), 10Patch-For-Review: docs: Consider making the latest release branch the default for the live docs site - https://phabricator.wikimedia.org/T311097 (10bmartinezcalvo) >>! In T311097#8467013, @AnneT wrote: > One idea I h... [12:54:37] 10Continuous-Integration-Config, 10Codex, 10Design-Systems-Team (Design-Systems-Sprint), 10Patch-For-Review: docs: Consider making the latest release branch the default for the live docs site - https://phabricator.wikimedia.org/T311097 (10bmartinezcalvo) a:05Catrope→03bmartinezcalvo [14:07:19] 10Continuous-Integration-Config, 10Codex, 10Design-Systems-Team (Design-Systems-Sprint), 10Patch-For-Review: docs: Consider making the latest release branch the default for the live docs site - https://phabricator.wikimedia.org/T311097 (10AnneT) I agree with using the warning tag and message, and the messa... [14:39:37] 10Continuous-Integration-Config, 10Codex, 10Design-Systems-Team (Design-Systems-Sprint), 10Patch-For-Review: docs: Consider making the latest release branch the default for the live docs site - https://phabricator.wikimedia.org/T311097 (10bmartinezcalvo) [14:40:02] 10Continuous-Integration-Config, 10Codex, 10Design-Systems-Team (Design-Systems-Sprint), 10Patch-For-Review: docs: Consider making the latest release branch the default for the live docs site - https://phabricator.wikimedia.org/T311097 (10bmartinezcalvo) [14:40:27] 10Continuous-Integration-Config, 10Codex, 10Design-Systems-Team (Design-Systems-Sprint), 10Patch-For-Review: docs: Consider making the latest release branch the default for the live docs site - https://phabricator.wikimedia.org/T311097 (10bmartinezcalvo) [14:53:02] 10Continuous-Integration-Config, 10Codex, 10Design-Systems-Team (Design-Systems-Sprint), 10Patch-For-Review: docs: Consider making the latest release branch the default for the live docs site - https://phabricator.wikimedia.org/T311097 (10bmartinezcalvo) >>! In T311097#8473903, @AnneT wrote: > I agree with... [15:39:16] 10Gerrit, 10Sustainability (Incident Followup), 10Upstream: Investigate Gerrit h2 cache being way too large - https://phabricator.wikimedia.org/T323754 (10hashar) I wrote a summary in a form of a blog post at {J300}. [16:01:04] 10Scap: Scap get stuck when trying to deploy a patch chain (from latest patch) - https://phabricator.wikimedia.org/T325074 (10dancy) Nice debugging! [16:26:39] 10GitLab: Support #Patch-For-Review with GitLab merges - https://phabricator.wikimedia.org/T325297 (10hashar) #GerritBot is implemented as a Gerrit plugin. It has no knowledge about GitLab whatsoever. Moving this to #gitlab Side note: whatever system is producing the comments such as T323889#8466713 should su... [16:28:36] 10GitLab (Integrations), 10Phabricator, 10Release-Engineering-Team (GitLab III: GitLab in LA 🪃), 10User-brennen: Comment on Phabricator tasks for new, merged, and abandoned changes on GitLab - https://phabricator.wikimedia.org/T324150 (10hashar) The Gitlab notifications are originating from @gerritbot whic... [16:43:29] 10GitLab (Auth & Access), 10Release-Engineering-Team, 10Wikimedia-GitHub, 10Security: Support Github login in Gitlab - https://phabricator.wikimedia.org/T325235 (10brennen) I'm not sure if I can say persuasively why this sounds like a huge can of worms to me, but at first glance it really does. Tagging for... [16:44:12] 10GitLab (Integrations), 10Release-Engineering-Team: Import Merge Requests from GitHub read-only mirrored repos into GitLab - https://phabricator.wikimedia.org/T325106 (10brennen) [17:11:07] 10GitLab: Support #Patch-For-Review with GitLab merges - https://phabricator.wikimedia.org/T325297 (10dancy) @Lokal_Profil Thanks for the request. This is on our TODO list and will hopefully be taken care of in January. [17:18:11] 10GitLab: Support #Patch-For-Review with GitLab merges - https://phabricator.wikimedia.org/T325297 (10dancy) [17:18:13] 10GitLab (Integrations), 10Phabricator, 10Release-Engineering-Team (GitLab III: GitLab in LA 🪃), 10User-brennen: Comment on Phabricator tasks for new, merged, and abandoned changes on GitLab - https://phabricator.wikimedia.org/T324150 (10dancy) [17:55:53] 10Continuous-Integration-Config, 10MW-1.35-release, 10MW-1.38-release, 10PHP 8.0 support: Make PHP 8.0 voting on currently supported MW release branches - https://phabricator.wikimedia.org/T274965 (10Reedy) [17:56:05] 10Continuous-Integration-Config, 10MW-1.35-release: Add PHP 8.0 non voting jobs to 1.35 - https://phabricator.wikimedia.org/T269714 (10Reedy) 05Open→03Declined Hmm. We've got voting PHP 8.0/PHP 8.1 on 1.35... And some in experimental. So non voting ones serve no purpose at this point. [17:57:21] 10Continuous-Integration-Config, 10MW-1.35-release, 10MW-1.38-release, 10MW-1.39-release, 10PHP 8.1 support: Make PHP 8.1 voting on currently supported MW release branches - https://phabricator.wikimedia.org/T316080 (10Reedy) 1.35 has some voting PHP 8.1 tests... >https://integration.wikimedia.org/ci/jo... [18:00:11] 10GitLab (CI & Job Runners), 10Release-Engineering-Team (Priority Backlog 📥), 10serviceops-collab, 10Patch-For-Review: Move cloud runner CI jobs to trusted runners - https://phabricator.wikimedia.org/T322344 (10dduvall) >>! In T322344#8473349, @MoritzMuehlenhoff wrote: >>>! In T322344#8471866, @dduvall wro... [18:00:53] 10Continuous-Integration-Config, 10MW-1.35-release, 10MW-1.38-release, 10PHP 8.0 support: Make PHP 8.0 voting on currently supported MW release branches - https://phabricator.wikimedia.org/T274965 (10Reedy) MW 1.35 has voting >https://integration.wikimedia.org/ci/job/mediawiki-quibble-composertest-php80-d... [18:27:46] thcipriani: what's happening with the xmas/new year/holiday deployment freeze? [18:28:30] RhinosF1: Mon, Dec 19th – Tue, Jan 3rd. afaict [18:28:47] mutante: calendar has deployments next week [18:30:06] RhinosF1: https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/SJDFWSNXDJNYKL66AVAEWDFZHK6Y7UX4/ [18:30:15] wait, wrong year :) [18:30:32] mutante: wrong year [18:30:48] correct year: https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/OIE7SVI3VNTDAAXUDIDLFTD4ZNWB6DMB/ [18:31:26] mutante: okay, then calendar needs changing [18:32:08] yea, maybe be bold and link to the list ? [18:32:28] mutante: i'm on a call [18:32:55] we can check who added the deployments in those slots [18:33:04] in wiki history [18:39:00] 10Project-Admins, 10Content-Transform-Team: "Parsoid Tracking tasks" in Phabricator vs Content Transform Team - https://phabricator.wikimedia.org/T324679 (10JMcLeod_WMF) @Aklapper, if I understand your comment correctly, you are pointing out that a team can have a tracking sub-project, but it doesn't make sens... [18:40:12] RhinosF1: affected deployers: mvolz and matmarex. I just sent them an email to ask [18:40:27] mutante: ok [18:40:34] I can CC you but did not have address handy [18:40:52] mutante: anything@rhinosf1.com works [18:41:04] I own 2 domains [18:42:05] forwarded to codefreeze@rhinosf1.com [18:42:07] bah, yeah, I'll change it [18:43:06] this is "just" a problem with the calendar automation. I don't have a way to cancel a week automatically. Just have to manually fix what the bot does :\ [18:43:12] :) thanks [18:43:20] ROLLBACK [18:44:45] thanks for catching that RhinosF1 <3 [18:45:13] thcipriani: actually blame Zppix [18:45:50] We were on a call discussing stuff and it came up how no one does anything at Christmas [18:49:23] that Zppix, always being helpful :) Thanks both then. [18:49:57] * thcipriani turns off bot for next week and manually updates [18:52:43] No problem :) [18:57:00] jnuche: I found the place where we need to add the keyholder key but now I ask "which trusted_group do we use for jenkins deploy" :) [18:57:17] for example for scap the trusted_group is "deployment" [18:57:33] but other things use other groups etc [18:57:52] zuul has "zuul-deployers" [18:58:16] deploy-ci-docroot has "deployment-ci-admins" [18:58:30] deployment-ci-admins sounds kind of like a match to me [19:00:58] deployment-ci-admins: gid: 721 description: users who can perform administrative tasks on the deployment servers related to ci/builds. members: *contint_admins_members [19:01:10] thcipriani: ^ does that makes sense for "jenkins via scap deploy" ? [19:02:01] well, contint_admins_members is more people than contints_root_members [19:02:46] and contint_roots_members means releng_members plus James :) [19:20:23] 10GitLab: Trusted gitlab runners need access to kubestagemaster k8s cluster - https://phabricator.wikimedia.org/T325385 (10dancy) [19:22:18] 10Continuous-Integration-Infrastructure, 10Jenkins, 10SRE, 10SRE-Access-Requests, and 2 others: New Keyholder identity for RelEng Jenkins service - https://phabricator.wikimedia.org/T324014 (10Dzahn) So.. question here.. We have 2 different "jenkins", jenkins on contint* and jenkins on releases*. Should t... [19:31:18] 10Release-Engineering-Team (Priority Backlog 📥), 10MW-on-K8s, 10serviceops, 10Patch-For-Review: Build MediaWiki images for kubernetes on the deployment servers - https://phabricator.wikimedia.org/T297673 (10dancy) Today I disabled the `build-mw-container-image` and `build-webserver-image` jobs on https://r... [19:38:23] 10GitLab: Trusted gitlab runners need access to kubestagemaster k8s cluster - https://phabricator.wikimedia.org/T325385 (10dancy) [19:39:52] 10GitLab: Trusted gitlab runner containers need access to kubestagemaster k8s cluster - https://phabricator.wikimedia.org/T325385 (10dancy) [19:40:36] 10GitLab: Trusted gitlab runner containers need access to kubestagemaster k8s cluster - https://phabricator.wikimedia.org/T325385 (10dancy) [20:28:59] 10GitLab (Project Migration), 10Phabricator, 10Release-Engineering-Team (Priority Backlog 📥), 10serviceops-collab, and 3 others: Migrate active repositories in Phabricator Differential to GitLab - https://phabricator.wikimedia.org/T191182 (10Dzahn) This one is now just waiting for the migration of the "pha... [20:32:55] 10Continuous-Integration-Infrastructure, 10Jenkins, 10SRE, 10SRE-Access-Requests, and 2 others: New Keyholder identity for RelEng Jenkins service - https://phabricator.wikimedia.org/T324014 (10Dzahn) If you are ok with "deployment-ci-admins" to be used as the admin group that can deploy jenkins.. then we c... [20:35:35] 10Continuous-Integration-Infrastructure, 10Jenkins, 10SRE, 10SRE-Access-Requests, and 2 others: New Keyholder identity for RelEng Jenkins service - https://phabricator.wikimedia.org/T324014 (10Dzahn) @thcipriani This is a bit like an access request, what do you think about the above? [22:01:51] 10Continuous-Integration-Infrastructure, 10Jenkins, 10SRE, 10SRE-Access-Requests, and 2 others: New Keyholder identity for RelEng Jenkins service - https://phabricator.wikimedia.org/T324014 (10thcipriani) >>! In T324014#8474913, @Dzahn wrote: > @thcipriani This is a bit like an access request, what do you... [22:20:42] 10GitLab (Auth & Access), 10Release-Engineering-Team, 10Wikimedia-GitHub, 10Security: Support Github login in Gitlab - https://phabricator.wikimedia.org/T325235 (10bd808) > Wikimedia Gitlab already integrates into an SSO system, and you can't have two SSO systems (not without serious self-harm, anyway) so... [22:40:42] 10GitLab (Auth & Access), 10Release-Engineering-Team, 10Wikimedia-GitHub, 10Security: Support Github login in Gitlab - https://phabricator.wikimedia.org/T325235 (10Tgr) Toolsadmin should redirect back to the source of registration after step 7, but that's a separate story. Yeah, it's more or less as you s... [22:47:03] 10GitLab (Auth & Access), 10Release-Engineering-Team, 10Wikimedia-GitHub, 10Security: Support Github login in Gitlab - https://phabricator.wikimedia.org/T325235 (10Tgr) Strictly from the contributor's POV it's 1) easier login (if they are logged into Github most of the time, but not logged into Wikimedia I...