[00:12:52] 06Project-Admins, 06Movement-Insights: Create data-problem Phabricator tag - https://phabricator.wikimedia.org/T362839#9728480 (10nshahquinn-wmf) Okay, sounds like we have broad support, so let's go ahead and create the tag! [00:13:05] 06Project-Admins, 06Movement-Insights: Create data-problem Phabricator tag - https://phabricator.wikimedia.org/T362839#9728481 (10nshahquinn-wmf) [07:16:32] (03PS1) 10Hslater: Add BlueSpiceDistributionConnector as dependency to BlueSpiceExtendedSearch [integration/config] - 10https://gerrit.wikimedia.org/r/1021763 [07:21:19] (03CR) 10Hashar: [C:03+2] Add BlueSpiceDistributionConnector as dependency to BlueSpiceExtendedSearch [integration/config] - 10https://gerrit.wikimedia.org/r/1021763 (owner: 10Hslater) [07:22:43] (03Merged) 10jenkins-bot: Add BlueSpiceDistributionConnector as dependency to BlueSpiceExtendedSearch [integration/config] - 10https://gerrit.wikimedia.org/r/1021763 (owner: 10Hslater) [07:23:04] (03CR) 10Hashar: [C:03+2] jjb: force ansi coloring in composer [integration/config] - 10https://gerrit.wikimedia.org/r/1021514 (owner: 10Hashar) [07:24:28] (03CR) 10Hashar: [C:03+2] "Deployed" [integration/config] - 10https://gerrit.wikimedia.org/r/1021763 (owner: 10Hslater) [07:24:34] (03Merged) 10jenkins-bot: jjb: force ansi coloring in composer [integration/config] - 10https://gerrit.wikimedia.org/r/1021514 (owner: 10Hashar) [08:20:38] 06Project-Admins, 06Movement-Insights: Create data-problem Phabricator tag - https://phabricator.wikimedia.org/T362839#9728838 (10Peachey88) Are you sure you need multiple projects?, a tag (yellow) project is a secondary tag that will already have other projects attached to the task and you can just just searc... [08:25:24] 06Release-Engineering-Team, 06Infrastructure-Foundations, 06serviceops, 13Patch-For-Review: Deprecate buster-backports - https://phabricator.wikimedia.org/T362518#9728841 (10JMeybohm) httpd-fcgi + dependent images seem to not have successfully rebuild on Monday. checking. [08:29:10] 06Release-Engineering-Team, 06Infrastructure-Foundations, 06serviceops, 13Patch-For-Review: Deprecate buster-backports - https://phabricator.wikimedia.org/T362518#9728843 (10JMeybohm) Successfully published image docker-registry.discovery.wmnet/httpd-fcgi:2.4.38-10-u5-20240415 Successfully published image... [08:35:15] 10Gerrit, 07Upstream: Horizontal scrollbars are missing when needed in Gerrit - https://phabricator.wikimedia.org/T257705#9728879 (10Paladox) {F47489277} The above shows then end “. It’s just not obvious as it has a similar colour to the tabs. [08:35:59] 10Gerrit, 07Upstream: Horizontal scrollbars are missing when needed in Gerrit - https://phabricator.wikimedia.org/T257705#9728886 (10Paladox) (This was discovered by someone else) [09:06:16] 10Phabricator: W9 triggers exception: "Application search engines of class "DivinerAtomSearchEngine" can not be used to build dashboard panels." - https://phabricator.wikimedia.org/T362961 (10Aklapper) 03NEW p:05Triage→03Low [09:07:04] 10Phabricator: W9 triggers exception: "Application search engines of class "DivinerAtomSearchEngine" can not be used to build dashboard panels." - https://phabricator.wikimedia.org/T362961#9728998 (10Aklapper) 05Open→03Resolved ` aklapper@phab1004:/srv/phab/phabricator$ sudo ./bin/remove destroy W9 Destr... [10:34:38] (03PS1) 10Jgiannelos: Reduce noise on visualdiff testing [integration/visualdiff] - 10https://gerrit.wikimedia.org/r/1021888 [11:29:44] (03CR) 10Isabelle Hurbain-Palatin: [C:03+2] "Probably could do with a couple more comments, but this should disappear, like, next week." [integration/visualdiff] - 10https://gerrit.wikimedia.org/r/1021888 (owner: 10Jgiannelos) [11:30:28] (03Merged) 10jenkins-bot: Reduce noise on visualdiff testing [integration/visualdiff] - 10https://gerrit.wikimedia.org/r/1021888 (owner: 10Jgiannelos) [12:48:16] 06Gerrit-Privilege-Requests, 10Librarization: Allow `mediawiki` group (and project owners?) to set Verified+2 and submit `mediawiki/libs`, like for `mediawiki/extensions` etc. - https://phabricator.wikimedia.org/T362980 (10Jdforrester-WMF) 03NEW [13:54:29] 10Continuous-Integration-Infrastructure, 07Jenkins, 06Release-Engineering-Team, 07Security: Jenkins core security advisory 2024-04-17 - https://phabricator.wikimedia.org/T362852#9729582 (10hashar) 05Open→03Resolved Marking as **resolved** as we have agreed to skip this release since we do not use t... [14:04:22] 10Gerrit, 10Release-Engineering-Team (Seen): Gerrit timeout when cloning mediawiki/core - https://phabricator.wikimedia.org/T292858#9729597 (10Paladox) Is this still an issue? [14:06:38] 10Gerrit: The UI "rebase" feature is working incorrectly since the last gerrit update for chained patches - https://phabricator.wikimedia.org/T310077#9729602 (10Paladox) Is this still an issue (also a + is that gerrit supports rebasing chained changes now via the UI). [14:18:05] 10Phabricator (phabricator-next), 06translatewiki.net, 07I18n: Adding sicilian language (scn) - https://phabricator.wikimedia.org/T299694#9729640 (10Pppery) [14:18:21] 10Phabricator (phabricator-next), 06translatewiki.net, 07I18n: Slovenian language in Phabricator - https://phabricator.wikimedia.org/T318762#9729641 (10Pppery) [14:24:46] 10Gerrit: Gerrit daemon on a new replica refuses to start due to lack of `groups` index - https://phabricator.wikimedia.org/T337502#9729653 (10Paladox) Is this still an issue? [14:54:49] (03PS1) 10Hashar: Review access change [integration/visualdiff] (refs/meta/config) - 10https://gerrit.wikimedia.org/r/1021794 [15:06:39] !log gerrit: on https://gerrit.wikimedia.org/g/design/codex , deleted tag `1.3.0` (was same as v1.3.0). Requested by Volker [15:06:41] Logged the message at https://wikitech.wikimedia.org/wiki/Release_Engineering/SAL [15:07:00] (03CR) 10Jgiannelos: [C:03+1] Review access change [integration/visualdiff] (refs/meta/config) - 10https://gerrit.wikimedia.org/r/1021794 (owner: 10Hashar) [15:07:49] (03PS2) 10Hashar: Replace groups with content-transform-team [integration/visualdiff] (refs/meta/config) - 10https://gerrit.wikimedia.org/r/1021794 [15:09:17] (03CR) 10Isabelle Hurbain-Palatin: [C:03+1] Replace groups with content-transform-team [integration/visualdiff] (refs/meta/config) - 10https://gerrit.wikimedia.org/r/1021794 (owner: 10Hashar) [15:11:23] (03CR) 10Hashar: [V:03+2 C:03+2] Replace groups with content-transform-team [integration/visualdiff] (refs/meta/config) - 10https://gerrit.wikimedia.org/r/1021794 (owner: 10Hashar) [15:12:35] (03PS1) 10Hashar: Review access change [integration/visualdiff] (refs/meta/config) - 10https://gerrit.wikimedia.org/r/1021795 [15:12:58] (03PS2) 10Hashar: Remove push/submit since CI passes and should submit for us [integration/visualdiff] (refs/meta/config) - 10https://gerrit.wikimedia.org/r/1021795 [15:13:13] (03CR) 10Hashar: [V:03+2 C:03+2] Remove push/submit since CI passes and should submit for us [integration/visualdiff] (refs/meta/config) - 10https://gerrit.wikimedia.org/r/1021795 (owner: 10Hashar) [15:24:10] 10Scap, 10Data-Platform-SRE (2024.04.15 - 2024.05.05), 13Patch-For-Review: hdfs-tools: Stop using git-fat - https://phabricator.wikimedia.org/T328473#9729749 (10BTullis) a:03BTullis [15:26:31] 10Scap, 10Data-Platform-SRE (2024.04.15 - 2024.05.05), 13Patch-For-Review: hdfs-tools: Stop using git-fat - https://phabricator.wikimedia.org/T328473#9729762 (10BTullis) p:05Triage→03High [15:26:36] 10Scap: Proposal for refactoring of backport dependency handling - https://phabricator.wikimedia.org/T362987 (10jnuche) 03NEW [15:32:35] 10Release-Engineering-Team (Priority Backlog 📥), 10Scap, 10Wikidata, 10Wikidata-Query-Service, and 3 others: wdqs: replace git-fat with git-lfs - https://phabricator.wikimedia.org/T316876#9729795 (10BTullis) p:05Low→03High I don't have the necessary rights in gerrit to +2 the patch, but I should proaba... [15:33:39] 06Release-Engineering-Team, 06collaboration-services, 06Java-Scala-Standardization, 10Data-Platform-SRE (2024.04.15 - 2024.05.05), 07Security: Investigate replacing Archiva with Gitlab repositories - https://phabricator.wikimedia.org/T358612#9729809 (10BTullis) The dependence on Archiva for `git-fat` has... [15:34:32] 10Release-Engineering-Team (Priority Backlog 📥), 13Patch-For-Review, 05Release, 05Train Deployments: 1.43.0-wmf.1 deployment blockers - https://phabricator.wikimedia.org/T361395#9729811 (10thcipriani) 05Open→03Resolved [15:35:25] 10Release-Engineering-Team (Priority Backlog 📥), 05Release, 05Train Deployments: 1.43.0-wmf.3 deployment blockers - https://phabricator.wikimedia.org/T361397#9729812 (10thcipriani) p:05Triage→03Medium a:03jnuche [15:37:16] 10Scap: Proposal for refactoring of backport dependency handling - https://phabricator.wikimedia.org/T362987#9729825 (10jnuche) [15:45:49] (03PS1) 10Majavah: build: Indent test/.eslintrc.json with tabs [performance/fresnel] - 10https://gerrit.wikimedia.org/r/1022025 [15:59:12] 10Gerrit, 10Release-Engineering-Team (Seen): Gerrit commit not found - https://phabricator.wikimedia.org/T355504#9729899 (10thcipriani) p:05Triage→03Low [16:16:41] 10Phabricator (phabricator-next), 06translatewiki.net, 07I18n: Slovenian language in Phabricator - https://phabricator.wikimedia.org/T318762#9730008 (10Pppery) I've optimistically moved this to Phabricator-next, but note that the translations won't be visible until the subtask is resolved even if the locale... [16:16:56] 10Phabricator (phabricator-next), 06translatewiki.net, 07I18n: Adding sicilian language (scn) - https://phabricator.wikimedia.org/T299694#9730009 (10Pppery) I've optimistically moved this to Phabricator-next, but note that the translations won't be visible until the subtask is resolved even if the locale fil... [16:17:38] (DatasourceError) firing: Queue (Jenkins jobs + Zuul functions) alert - https://grafana.wikimedia.org/alerting/grafana/iS0FSjJ4z/view - https://wikitech.wikimedia.org/wiki/Monitoring/DatasourceError - https://alerts.wikimedia.org/?q=alertname%3DDatasourceError [16:25:56] 10Release-Engineering-Team (Onboarding 🚀), 10Scap: scap should have a better error message when it can't find keyholder key - https://phabricator.wikimedia.org/T313624#9730027 (10Sandeeps) a:03Sandeeps [16:27:38] (DatasourceError) resolved: Queue (Jenkins jobs + Zuul functions) alert - https://grafana.wikimedia.org/alerting/grafana/iS0FSjJ4z/view - https://wikitech.wikimedia.org/wiki/Monitoring/DatasourceError - https://alerts.wikimedia.org/?q=alertname%3DDatasourceError [16:48:37] (DatasourceError) firing: Queue (Jenkins jobs + Zuul functions) alert - https://grafana.wikimedia.org/alerting/grafana/iS0FSjJ4z/view - https://wikitech.wikimedia.org/wiki/Monitoring/DatasourceError - https://alerts.wikimedia.org/?q=alertname%3DDatasourceError [16:51:00] * taavi shakes fist at the BlueSpice repos where CI is broken due to some missing dependency(?) but people keep force-merging LibUp patches [16:53:37] (DatasourceError) resolved: Queue (Jenkins jobs + Zuul functions) alert - https://grafana.wikimedia.org/alerting/grafana/iS0FSjJ4z/view - https://wikitech.wikimedia.org/wiki/Monitoring/DatasourceError - https://alerts.wikimedia.org/?q=alertname%3DDatasourceError [16:56:55] 10Phabricator, 06collaboration-services, 06WMF-NDA-Requests: Add WMDE staff who have signed the NDA with the WMF to the WMF-NDA phabricator policy group - https://phabricator.wikimedia.org/T358578#9730132 (10Dzahn) 05In progress→03Open p:05High→03Medium [16:57:32] 06Project-Admins, 06Movement-Insights: Create data-problem Phabricator tag - https://phabricator.wikimedia.org/T362839#9730138 (10Aklapper) I'd like to see a more specific name (maybe an `Analytics-` prefix or something) - nearly everything is some kind "data problem", for example the HTTP 503 error when I ope... [16:59:01] 10Phabricator, 06collaboration-services, 06WMF-NDA-Requests: Add WMDE staff who have signed the NDA with the WMF to the WMF-NDA phabricator policy group - https://phabricator.wikimedia.org/T358578#9730146 (10Dzahn) a:03Muhammad_Yasser_Jazirahly_WMDE [16:59:18] 10Phabricator, 06collaboration-services, 06WMF-NDA-Requests: Add WMDE staff who have signed the NDA with the WMF to the WMF-NDA phabricator policy group - https://phabricator.wikimedia.org/T358578#9730142 (10Dzahn) a:05Dzahn→03None @Muhammad_Yasser_Jazirahly_WMDE Are you (still) interested in getting acc... [17:01:30] brennen: looks like we can/should disable that custom "legalpad" app in Phabricator. Legal says it's retired in response to old ticket to clarify the NDA process [17:01:49] brennen: sounds good to me since it's like the one custom app just made for us with no relation to upstream. afair [17:02:03] trying to figure out how to actually do that [17:03:51] mutante: err, there's more than the 1 form [17:04:26] RhinosF1: ah, right, there was some other case but it was pretty obscure to me [17:04:41] mutante: I don't think they are [17:04:43] fair enough, let me see if I can just delete L3 specifically [17:04:47] There's the VTRS one [17:05:02] A wikimedia tech code of conduct [17:05:19] And L2 [17:07:16] yeah, i'm not 100% sure it's not in use. [17:07:29] 10Phabricator: Allow hotlinking of external images in Phab tasks - https://phabricator.wikimedia.org/T186246#9730181 (10Aklapper) 05Open→03Declined I'd prefer not to, due to maintenance costs and due to the Wikimedia Commons video embedding already having its issues that are not easy to fix. [17:08:00] 10Phabricator: Enable embedding of images from Wikimedia Commons - https://phabricator.wikimedia.org/T199407#9730183 (10Aklapper) 05Open→03Declined I'd prefer not to, due to maintenance costs and due to the Wikimedia Commons video embedding already having its issues that are not easy to fix. [17:08:40] brennen: it 100% is in use [17:10:20] well, here's the thing [17:10:31] while it's true there is more than one "L" document [17:10:46] if Legal is asked about one of them and says we should retire it and all request should go to them directly [17:10:59] it seems to me that means the others are also not meaningful for legal perspective [17:11:10] mutante: I don't disagree but you can't just disable the software [17:11:24] You need to contact the people who own the forms and let them of the plan [17:11:44] well, I don't think there are owners [17:12:01] except the one who told me to retire it :p [17:12:16] but I won't just disable it now, no worries [17:12:27] mutante: L37 is owned by trust and safety [17:12:33] L45 would be the OTRS admins [17:12:55] ok [17:13:09] L35 is tech code of conduct committee (cc urbanecm ) [17:13:18] Not sure for L36 [17:13:19] i'm about to take PTO for the rest of the afternoon (snow camping!), but i can promise to give this actual attention this coming week. [17:13:27] L3 is SRE [17:13:39] That should be all the English ones mutante [17:13:42] brennen: I shouldn't even have realtime pinged on silent Friday, go enjoy the weekend [17:13:44] RhinosF1: I have been summoned [17:13:46] What's up? [17:14:05] urbanecm: does tech code of conduct still use L35 on legalpad [17:14:40] RhinosF1: nope. I'm not even its signatory [17:14:56] urbanecm: can someone set fire to it [17:15:35] Deletion in phab is tricky in general [17:15:56] urbanecm: or rename it to NOT IN USE [17:16:16] can you disable just one of the pads, without changing the other pads? [17:16:52] mutante: maybe just change who can sign to no one [17:16:54] mutante: I guess visibioity can be changed to no one [17:17:01] Or visibility [17:17:14] And rename it to trash [17:17:27] I see, yea, I could also replace the content with "THIS IS GONE" something [17:17:45] ack, thanks.. hmm [17:18:30] maybe best is to keep it readable but change the content to "retired - please go here instead" [17:18:42] Probably [17:18:44] no questions that way why some link is broken in another place [17:28:00] 10Phabricator, 10Legalpad, 06WMF-Legal, 06WMF-NDA-Requests: Clarify if NDAs (to access #WMF-NDA protected Phab tasks) are on paper or in Legalpad's L2 or both - https://phabricator.wikimedia.org/T349595#9730220 (10Dzahn) @KFrancis Thank you very much and apologies as well for the delay on my side. You men... [17:28:11] edited L2 https://phabricator.wikimedia.org/legalpad/view/2/#913 [17:31:07] rabbit hole: " Special note: Employees do need to sign the Trusted Volunteer Access & Confidentiality Agreement (colloquially referred to as an "L2") when they leave WMF. This must be signed for their access to confidential data to remain." [17:40:18] 10Phabricator, 10Legalpad, 06WMF-Legal, 06WMF-NDA-Requests: Clarify if NDAs (to access #WMF-NDA protected Phab tasks) are on paper or in Legalpad's L2 or both - https://phabricator.wikimedia.org/T349595#9730279 (10Dzahn) I made the following edits to the "Volunteer NDA" docs to reflect this change: https:... [17:40:47] ^ edited wikitech docs a bit [17:41:13] 10Phabricator, 10Legalpad, 06WMF-Legal, 06WMF-NDA-Requests: Clarify if NDAs (to access #WMF-NDA protected Phab tasks) are on paper or in Legalpad's L2 or both - https://phabricator.wikimedia.org/T349595#9730287 (10Dzahn) 05Open→03Resolved [17:44:47] 06Project-Admins, 06Movement-Insights: Create data-problem Phabricator tag - https://phabricator.wikimedia.org/T362839#9730305 (10nshahquinn-wmf) >>! In T362839#9728838, @Peachey88 wrote: > Are you sure you need multiple projects?, a tag (yellow) project is a secondary tag that will already have other projects... [17:47:18] 10Phabricator, 06collaboration-services, 06WMF-NDA-Requests: Add WMDE staff who have signed the NDA with the WMF to the WMF-NDA phabricator policy group - https://phabricator.wikimedia.org/T358578#9730314 (10WMDE-leszek) 05Open→03Resolved a:05Muhammad_Yasser_Jazirahly_WMDE→03None Thanks for all t... [17:47:55] 10Phabricator, 06collaboration-services, 06WMF-NDA-Requests: Add WMDE staff who have signed the NDA with the WMF to the WMF-NDA phabricator policy group - https://phabricator.wikimedia.org/T358578#9730326 (10Dzahn) a:03Dzahn [17:53:36] 06Project-Admins, 06Movement-Insights: Create data-problem Phabricator tag - https://phabricator.wikimedia.org/T362839#9730354 (10nshahquinn-wmf) [17:57:51] 10Phabricator, 06collaboration-services: Retire legalpad phabricator/phorge application? - https://phabricator.wikimedia.org/T363009 (10Dzahn) 03NEW [18:02:54] 10Release-Engineering-Team (Onboarding 🚀), 10Scap: scap should have a better error message when it can't find keyholder key - https://phabricator.wikimedia.org/T313624#9730388 (10Sandeeps) 05Open→03In progress [18:16:57] 10Phabricator, 10Legalpad, 06WMF-Legal, 06WMF-NDA-Requests: Clarify if NDAs (to access #WMF-NDA protected Phab tasks) are on paper or in Legalpad's L2 or both - https://phabricator.wikimedia.org/T349595#9730480 (10KFrancis) @Dzahn Yes, thank you, I meant L2! I appreciate your edits to the page and you... [18:19:59] 10Phabricator, 06collaboration-services: Retire legalpad phabricator/phorge application? - https://phabricator.wikimedia.org/T363009#9730485 (10JJMC89) {L37} and {L45} plus their various translations are actively used and do not have another process like the replacement for L2. - L45 is required for [[ https:/... [18:22:01] 10Phabricator, 06collaboration-services, 06Trust-and-Safety, 10Znuny: Retire legalpad phabricator/phorge application? - https://phabricator.wikimedia.org/T363009#9730491 (10RhinosF1) Adding project tags for areas affected [18:30:04] 10Phabricator, 06collaboration-services, 06Trust-and-Safety, 10Znuny: Retire legalpad phabricator/phorge application? - https://phabricator.wikimedia.org/T363009#9730526 (10taavi) > Here in Phabricator/Phorge we have the legalpad application which doesn't come from upstream but has once been developed for... [18:34:09] 10Phabricator, 06collaboration-services, 06Trust-and-Safety, 10Znuny: Retire legalpad phabricator/phorge application? - https://phabricator.wikimedia.org/T363009#9730543 (10Dzahn) I was probably mistaken. It was enabled way back in T656 in the early days of Phabricator at WMF and started out on a Labs inst... [18:38:17] 10Phabricator, 06collaboration-services, 06Trust-and-Safety, 10Znuny: Retire legalpad phabricator/phorge application? - https://phabricator.wikimedia.org/T363009#9730561 (10Dzahn) Here is some archeology about that and why I had this memory. {F47569107} [19:33:37] (03CR) 10Majavah: [C:03+2] build: Updating eslint-config-wikimedia to 0.27.0 [performance/WikimediaDebug] - 10https://gerrit.wikimedia.org/r/1021993 (owner: 10Libraryupgrader) [19:43:31] (03CR) 10Jforrester: [C:03+2] "No need to deploy." [integration/docroot] - 10https://gerrit.wikimedia.org/r/1022003 (owner: 10Libraryupgrader) [19:45:55] James_F: please still deploy it this ways that is not a surprise commit to pull in when some does th enext deploy :] [19:46:25] Eh. On a Friday? [19:47:15] well [19:47:22] else don't +2 it :-] [19:47:42] I'll deploy next week when it's not a Friday. [19:47:53] I am not worried at all about the docroot deployment [19:48:07] Fiiine. :-) [19:48:13] my rule of thumb is don't break the real productionon friday [19:48:22] cause people hate being pulled out of their weekend [19:48:30] and by real production I mean: wikipedia :D [19:48:35] (and the sister project) [19:50:07] Done. [19:52:17] James_F: thanks !!! :) [19:57:34] (03CR) 10Jforrester: [C:03+2] build: Indent test/.eslintrc.json with tabs [performance/fresnel] - 10https://gerrit.wikimedia.org/r/1022025 (owner: 10Majavah) [19:58:32] (03Merged) 10jenkins-bot: build: Indent test/.eslintrc.json with tabs [performance/fresnel] - 10https://gerrit.wikimedia.org/r/1022025 (owner: 10Majavah) [19:58:48] James_F: <3 for all the libup-related +2's today. [19:58:59] taavi: Always happy to help out. [19:59:26] But the large number of failures suggest I need to do a bunch of fixes for wfGetDB etc. [19:59:50] yeah, out of the non-bluespice failures I've seen today most are wfGetDB [20:00:08] And possibly we just need to drop all the BlueSpice repos from CI. :-( [20:00:52] i sent a patch to auto-disable libup auto-+2 for those but that would work too [20:01:05] (https://gitlab.wikimedia.org/repos/ci-tools/libup/-/merge_requests/34) [20:05:37] Yeah, I saw. :-( [21:20:56] 10Continuous-Integration-Config, 10Release-Engineering-Team (Seen), 10MW-on-K8s, 07Epic, 13Patch-For-Review: Have all Wikimedia production extensions and skins in the CI gate - https://phabricator.wikimedia.org/T249674#9730813 (10Umherirrender) [22:59:08] 06Release-Engineering-Team, 06Infrastructure-Foundations, 06serviceops, 13Patch-For-Review: Deprecate buster-backports - https://phabricator.wikimedia.org/T362518#9731003 (10Dzahn) > According to CodeSearch, affected images are: Codesearch didn't find itself ?:) https://gerrit.wikimedia.org/r/c/operation... [23:23:15] 10GitLab (CI & Job Runners): Secret storage for CI jobs - https://phabricator.wikimedia.org/T329798#9731020 (10bd808) > GitLab EE has mechanisms for jobs to authenticate to a Hashicorp Vault service and fetch secrets. It is not completely clear from reading https://docs.gitlab.com/ee/ci/secrets/ if there is real...