[00:26:13] 10Phabricator, 06Security-Team, 07SecTeam-Processed: Audit Phabricator security policies and groups membership - https://phabricator.wikimedia.org/T391150#10763358 (10Dzahn) We would need T306708 to be resolved before removing people from WMF-NDA. [00:30:25] 10Gerrit (Gerrit 3.12): Upgrade Gerrit hosts to Bookworm - https://phabricator.wikimedia.org/T392464#10763364 (10Dzahn) Yea.. this is what gerrit2003 was made for (T372804) ... [00:36:05] 10Gerrit, 06collaboration-services: SSH on gerrit2003 is CRITICAL: CRITICAL - https://phabricator.wikimedia.org/T388785#10763371 (10Dzahn) [00:39:43] 10Scap: scap deploy --init on deployment server fails on first puppet run - https://phabricator.wikimedia.org/T257317#10763378 (10Dzahn) [00:42:46] 10Gerrit (Gerrit 3.12): Upgrade Gerrit hosts to Bookworm - https://phabricator.wikimedia.org/T392464#10763381 (10Dzahn) That's also where T338470 is fixed already. We have had that for months yet there didn't seem to be interest in testing and switching to it. But it should happen as part of T387833. Then on... [01:58:50] 10Beta-Cluster-Infrastructure: High load on deployment-mediawiki14 and slow responses - https://phabricator.wikimedia.org/T392534#10763435 (10MusikAnimal) Thanks a lot for getting Beta back up, @bd808! I wanted to say this exercise is nearly identical to what I've done for XTools for years. > I am again usi... [07:13:34] (03open) 10jelto: gitlab-runner: bump image version to alpine-v17.9.3 [repos/releng/gitlab-cloud-runner] - 10https://gitlab.wikimedia.org/repos/releng/gitlab-cloud-runner/-/merge_requests/468 (https://phabricator.wikimedia.org/T392495) [07:25:02] hashar: bonjour! I've taken a stab at installing elasticsearch in quibble for wikibase search e2e tests. it's all a bit clumsy at the moment, but it's mostly working, so I wanted to get some feedback before polishing it more. the patch is https://gerrit.wikimedia.org/r/c/integration/config/+/1137108 [07:25:45] I guess my main question is whether you think this look like it's going in the right direction. I've also listed some more specific questions in the commit message there, mainly how to best install elasticsearch/opensearch, and how to conditionally start it if necessary. [07:25:47] jakob_WMDE: ahh great :) [07:27:10] does the dpkg install work? [07:27:23] yes! [07:27:27] I'd expect the upstream debian package to have been signed by gpg and thus the signature to be verified [07:27:31] fun [07:27:31] :b [07:28:13] we can also get it from our apt.wikimedia.org [07:28:38] oh neat, I didn't know that apt repo existed. that sounds better! [07:28:53] well I don't know whether we have a copy of elasticsearch/opensearch [07:29:02] ah [07:29:05] the idea is potentially we can keep in sync [07:29:40] component/elastic710 [07:30:00] it is suchh a mess [07:32:19] what is a mess? :D [07:32:26] APT [07:32:28] DEBIAN [07:32:29] THE WORLD [07:32:33] ah, yes [07:32:56] so production search seems to use elasticsearch-oss 7.10.2 [07:32:59] under Bullseye [07:33:14] which we ship via an apt component component/elastic710 [07:33:40] prod will soon use opensearch [07:34:01] so you can create a file wikimedia-elasticsearch.list with the content: [07:34:02] deb http://apt.wikimedia.org/wikimedia bullseye-wikimedia component/elastic710 [07:34:05] ah [07:34:18] dcausse: would it be the stock version from debian? [07:34:43] I think we build our own deb for opensearch [07:35:10] we have the plugins as deb as well that might need to be installed [07:35:55] plugins: https://apt.wikimedia.org/wikimedia/pool/component/opensearch13/w/wmf-opensearch-search-plugins/ [07:36:37] interestingly that component is not in puppet.git [07:38:37] hm should be pulled from puppet://modules/profile/manifests/opensearch/cirrus/server.pp [07:38:44] I am not sure what I was grepping for [07:38:48] I found it eventually [07:39:24] deb http://apt.wikimedia.org/wikimedia bullseye-wikimedia component/opensearch13 [07:39:41] ok, then I'll try that! [07:40:02] but I don't know whether it includes the opensearch package [07:40:13] dcausse: merci! [07:40:30] perhaps opensearch is not in that component, can't remember [07:40:50] it does not show up under https://apt.wikimedia.org/wikimedia/pool/component/opensearch13/ :) [07:41:31] oh cool [07:43:40] should be here: https://apt.wikimedia.org/wikimedia/pool/thirdparty/opensearch1/o/opensearch/ [07:43:47] then maybe I can start with component/elastic710 to keep things simple? switching to opensearch later should just be a matter of renaming some files/paths, right? [07:44:00] that is so inconsistent [07:44:02] :) [07:44:12] jakob_WMDE: I suggest to start with opensearch [07:44:22] dcausse: ok! [07:44:44] everything's tested with opensearch now [07:45:04] great find dcausse that works! [07:45:46] jakob_WMDE: so add a file `wikimedia-opensearch.list` with the content: [07:45:46] deb http://apt.wikimedia.org/wikimedia bullseye-wikimedia thirdparty/opensearch1 [07:45:46] and in the Dockerfile COPY it to /etc/apt/sources.list.d/wikimedia-opensearch.list [07:46:21] yup ok, thanks! [07:46:45] before invoking RUN {{ "opensearch" | apt_install }} [07:47:27] dcausse: my guess is once Quibble/CI has ElasticSearch running for MediaWiki testing, you might be interesting in it for CirrusSearch/Elastica etc [07:48:27] hashar: yes, indeed :) [07:51:13] hashar: any immediate thoughts on anything else in those patches? regarding conditionally starting elastic/opensearch maybe? otherwise I'm also happy to get comments later on the patch and/or the connected phabricator ticket :) [07:51:37] I will review the patch :) [07:51:44] thanks! [07:52:10] later we will be able to drop that and use several instances in parallel [07:52:19] one with Quibble, another for ElasticSearch, another for the db etc [07:52:23] but we don't have the infra for that yet :) [07:53:20] good to hear! baking everything into that one image felt a bit odd to me [07:54:58] oh my god [07:55:01] opensearch is 222MB [07:55:10] the image will be SO bloated [07:55:11] :) [07:56:32] :/ [08:00:51] it's partly why we did not bother adding integration tests to jenkins, main reason tho is we need a multi-wiki setup [08:01:41] alternatively we have https://gitlab.wikimedia.org/repos/search-platform/cirrus-integration-test-runner which is by a bot named Cindy that votes on cirrus CR [08:01:50] s/is/is run/ [08:02:11] I imagine we could add support for WikibaseCirrusSearch there [08:03:19] the opensearch package ships a full copy of the jdk :) [08:51:53] jakob_WMDE: I have send the review on https://gerrit.wikimedia.org/r/c/integration/config/+/1137108 [08:52:21] hashar: thank youuu, I'll take a look later after meetings :) [08:57:51] 10Beta-Cluster-Infrastructure: Support IPv6 in beta - https://phabricator.wikimedia.org/T211677#10763954 (10taavi) 05Stalledβ†’03Open [11:02:09] jakob_WMDE: There's the new Catalyst system we're using for WikiLambda that runs a custom helm chart; we're using it to test an MW stack with back-end services, which may be the better long-term solution to invest in at this point. [11:07:42] James_F: sounds interesting. do you have a link for me to look at? the wikitech page is a bit sparse [11:21:32] jakob_WMDE: No, the Wikitech page is about it. If you file a Phab task tagged against https://phabricator.wikimedia.org/project/view/6782/ about exploring how it could work, the team might be able to help. [11:34:31] FIRING: ProbeDown: Service gerrit2002:443 has failed probes (http_gerrit_tls_ip4) - https://wikitech.wikimedia.org/wiki/Runbook#gerrit2002:443 - https://grafana.wikimedia.org/d/O0nHhdhnz/network-probes-overview?var-job=probes/custom&var-module=All - https://alerts.wikimedia.org/?q=alertname%3DProbeDown [11:34:39] 06Release-Engineering-Team, 06collaboration-services: ProbeDown - https://phabricator.wikimedia.org/T392576 (10phaultfinder) 03NEW [11:39:31] RESOLVED: ProbeDown: Service gerrit2002:443 has failed probes (http_gerrit_tls_ip4) - https://wikitech.wikimedia.org/wiki/Runbook#gerrit2002:443 - https://grafana.wikimedia.org/d/O0nHhdhnz/network-probes-overview?var-job=probes/custom&var-module=All - https://alerts.wikimedia.org/?q=alertname%3DProbeDown [12:59:48] Found an annoying bug in the Jenkins collapse section plugin. Clicking on collapsed sections in sidebar doesn't work. [12:59:50] https://github.com/jenkinsci/collapsing-console-sections-plugin/pull/53 [13:00:07] This might fix it [13:24:54] 10Continuous-Integration-Infrastructure, 10CampaignEvents, 10Campaigns-Product-Team (Campaign-Tools-Current-Sprint), 07ci-test-error: api-testing CI failure: Timeout of 5000ms exceeded in "before all" hook in "POST /campaignevents/v0/event_registration" - https://phabricator.wikimedia.org/T389863#10764803 (... [13:40:26] 10Continuous-Integration-Infrastructure (Zuul upgrade), 06cloud-services-team, 10Cloud-VPS (Quota-requests): Quota increase for zuul3 project - https://phabricator.wikimedia.org/T392294#10764848 (10fnegri) Patch merged and applied, the g4 flavor should now be available. > Here's my mortal user adding a... [14:11:09] 10Scap (SpiderPig πŸ•ΈοΈ): Support pasting Gerrit URLs into SpiderPig - https://phabricator.wikimedia.org/T392591 (10Lucas_Werkmeister_WMDE) 03NEW [14:12:35] 10Phabricator, 06Security-Team, 07SecTeam-Processed: Audit Phabricator security policies and groups membership - https://phabricator.wikimedia.org/T391150#10764938 (10sbassett) >>! In T391150#10763358, @Dzahn wrote: > We would need T306708 to be resolved before removing people from WMF-NDA. I don't see that... [14:19:45] 10Scap (SpiderPig πŸ•ΈοΈ): Support pasting Gerrit URLs into SpiderPig - https://phabricator.wikimedia.org/T392591#10764965 (10Lucas_Werkmeister_WMDE) [14:27:40] 10Release-Engineering-Team (Yak Shaving πŸƒπŸͺ’), 10Scap (SpiderPig πŸ•ΈοΈ): Add browser notification when deployment is awaiting user interaction - https://phabricator.wikimedia.org/T392487#10765001 (10Lucas_Werkmeister_WMDE) >>! In T392487#10761880, @dancy wrote: > Question to consider: Who should receive a browser n... [14:31:27] (03merge) 10dancy: gitlab-runner: bump image version to alpine-v17.9.3 [repos/releng/gitlab-cloud-runner] - 10https://gitlab.wikimedia.org/repos/releng/gitlab-cloud-runner/-/merge_requests/468 (https://phabricator.wikimedia.org/T392495) (owner: 10jelto) [14:34:24] !log Updating runners to v17.9.3 in gitlab-cloud-runners (staging) [14:34:25] Logged the message at https://wikitech.wikimedia.org/wiki/Release_Engineering/SAL [14:41:08] !log Updating runners to v17.9.3 in gitlab-cloud-runners (production) [14:41:12] Logged the message at https://wikitech.wikimedia.org/wiki/Release_Engineering/SAL [14:50:06] 10Phabricator: Custom task form for #MW-Interfaces-Team - https://phabricator.wikimedia.org/T392598 (10OWresch-WMF) 03NEW [15:07:34] (03update) 10dduvall: build-images.py: Refactor using `docker buildx bake` [repos/releng/release] - 10https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/167 (https://phabricator.wikimedia.org/T392526) [15:07:37] (03update) 10dduvall: build-images.py: Refactor using `docker buildx bake` [repos/releng/release] - 10https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/167 (https://phabricator.wikimedia.org/T392526) [15:07:40] (03update) 10dduvall: build-images.py: Refactor using `docker buildx bake` [repos/releng/release] - 10https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/167 (https://phabricator.wikimedia.org/T392526) [15:19:19] 10Release-Engineering-Team (Priority Backlog πŸ“₯), 13Patch-For-Review: Refactor `build-images.py` to use a common code image and `docker buildx` - https://phabricator.wikimedia.org/T392526#10765409 (10dduvall) 05Openβ†’03In progress a:03dduvall [15:20:03] maintenance-disconnect-full-disks build 695835 integration-agent-docker-1040 (/: 25%, /srv: 99%, /var/lib/docker: 79%): OFFLINE due to disk space [15:25:03] maintenance-disconnect-full-disks build 695836 integration-agent-docker-1040 (/: 25%, /srv: 42%, /var/lib/docker: 78%): RECOVERY disk space OK [15:32:22] !log Punched a hole in the beta cluster network blocks to allow 47.144.0.0/12 through. (T392534) [15:32:24] Logged the message at https://wikitech.wikimedia.org/wiki/Release_Engineering/SAL [15:32:25] T392534: High load on deployment-mediawiki14 and slow responses - https://phabricator.wikimedia.org/T392534 [15:50:19] (03update) 10dduvall: build-images.py: Refactor using `docker buildx bake` [repos/releng/release] - 10https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/167 (https://phabricator.wikimedia.org/T392526) [15:50:21] (03update) 10dduvall: build-images.py: Refactor using `docker buildx bake` [repos/releng/release] - 10https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/167 (https://phabricator.wikimedia.org/T392526) [15:50:23] (03update) 10dduvall: build-images.py: Refactor using `docker buildx bake` [repos/releng/release] - 10https://gitlab.wikimedia.org/repos/releng/release/-/merge_requests/167 (https://phabricator.wikimedia.org/T392526) [15:58:00] 10Release-Engineering-Team (Yak Shaving πŸƒπŸͺ’): SpiderPig should support train deployments - https://phabricator.wikimedia.org/T392610 (10dduvall) 03NEW [15:58:32] 10Release-Engineering-Team (Yak Shaving πŸƒπŸͺ’): SpiderPig should support train deployments - https://phabricator.wikimedia.org/T392610#10765576 (10dduvall) [16:30:03] maintenance-disconnect-full-disks build 695849 integration-agent-docker-1045 (/: 25%, /srv: 96%, /var/lib/docker: 38%): OFFLINE due to disk space [16:35:03] maintenance-disconnect-full-disks build 695850 integration-agent-docker-1045 (/: 25%, /srv: 30%, /var/lib/docker: 36%): RECOVERY disk space OK [17:09:09] 10Phabricator, 06Security-Team, 07SecTeam-Processed: Audit Phabricator security policies and groups membership - https://phabricator.wikimedia.org/T391150#10765844 (10Dzahn) Alright, so who would handle the requests to be added back? [18:16:09] 10Phabricator, 06Security-Team, 07SecTeam-Processed: Audit Phabricator security policies and groups membership - https://phabricator.wikimedia.org/T391150#10766066 (10sbassett) >>! In T391150#10765844, @Dzahn wrote: > Alright, so who would handle the requests to be added back? The plan is to give folks ampl... [18:27:28] 10Continuous-Integration-Infrastructure (Zuul upgrade), 06cloud-services-team, 10Cloud-VPS (Quota-requests): Quota increase for zuul3 project - https://phabricator.wikimedia.org/T392294#10766083 (10Andrew) ` root@cloudcontrol1011:~# openstack role list | grep admin | 1102f4ff63c3435793d0e4340bf4b04e | gl... [19:19:14] Hm.. "Error: 403, Requests from your IP have been blocked" when using https://en.m.wikipedia.beta.wmflabs.org/ [19:20:00] https://whois-dev.toolforge.org/w/143.58.160.0/lookup [19:25:50] probably caught up in: https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/message/B7RKAXXIFVDWOA4VRTFPR3AFS2JNAHSE/ [19:27:16] https://gerrit.wikimedia.org/r/plugins/gitiles/cloud/instance-puppet/+/76d9cfed3266819a7247435fc79a3ea23a5266ec/deployment-prep/_.yaml#23 [19:27:19] confirmed [19:31:38] 10Continuous-Integration-Infrastructure, 10CampaignEvents, 10Campaigns-Product-Team (Campaign-Tools-Current-Sprint), 07ci-test-error: api-testing CI failure: Timeout of 5000ms exceeded in "before all" hook in "POST /campaignevents/v0/event_registration" - https://phabricator.wikimedia.org/T389863#10766305 (... [19:39:29] think I've determined a netmask that will leave out that asn_cidr (assuming it's a home isp) [19:45:39] Krinkle: poked a hole for that whois lookup (I think) https://gerrit.wikimedia.org/r/plugins/gitiles/cloud/instance-puppet/+/42c7880be27913c9e841642d9ff3e50deb455e08%5E%21/#F0 now...just need to figure out the hosts where I need to manually run something [19:47:06] deployment-cache-text* most likely [19:49:39] !log deployment-cache-text08: sudo puppet-run to pick up https://gerrit.wikimedia.org/r/plugins/gitiles/cloud/instance-puppet/+/42c7880be27913c9e841642d9ff3e50deb455e08 [19:49:40] Logged the message at https://wikitech.wikimedia.org/wiki/Release_Engineering/SAL [19:54:16] !log deployment-cache-text08: systemctl reload varnish-frontend following puppet run change to /etc/varnish/blocked-nets.inc.vcl [19:54:17] Logged the message at https://wikitech.wikimedia.org/wiki/Release_Engineering/SAL [19:54:30] Krinkle: ok...I think that should work [19:55:33] thcipriani: it did. thanks! [19:56:11] sure thing [19:56:35] * thcipriani updates documentation on https://wikitech.wikimedia.org/wiki/Nova_Resource:Deployment-prep [19:56:49] (03open) 10dancy: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) [19:56:50] (03update) 10dancy: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) [20:02:28] (03update) 10dancy: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) [20:02:32] (03update) 10dancy: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) [20:04:51] (03update) 10dancy: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) [20:04:55] (03update) 10dancy: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) [20:06:48] (03update) 10dancy: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) [20:06:52] (03update) 10dancy: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) [20:13:20] (03update) 10dancy: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) [20:28:16] (03open) 10taavi: Fix license in pyproject.toml to -only variant [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/769 [20:28:21] (03update) 10taavi: Fix license in pyproject.toml to -only variant [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/769 [20:28:25] (03update) 10taavi: Fix license in pyproject.toml to -only variant [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/769 [20:45:48] (03open) 10dancy: web: Bump Codex from 1.15.0 to 1.23.0 [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/770 [20:45:50] (03update) 10dancy: web: Bump Codex from 1.15.0 to 1.23.0 [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/770 [20:46:29] (03update) 10dancy: web: Bump Codex from 1.15.0 to 1.23.0 [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/770 [20:46:33] (03update) 10dancy: web: Bump Codex from 1.15.0 to 1.23.0 [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/770 [20:47:01] (03merge) 10dancy: Fix license in pyproject.toml to -only variant [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/769 (owner: 10taavi) [20:48:13] (03update) 10dancy: web: Bump Codex from 1.15.0 to 1.23.0 [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/770 [20:49:48] 10Scap (SpiderPig πŸ•ΈοΈ), 13Patch-For-Review: Support pasting Gerrit URLs into SpiderPig - https://phabricator.wikimedia.org/T392591#10766538 (10dancy) 05Openβ†’03In progress p:05Triageβ†’03Medium a:03dancy [21:22:48] (03approved) 10thcipriani: web: Bump Codex from 1.15.0 to 1.23.0 [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/770 (owner: 10dancy) [21:48:32] thanks for poking that hole thcipriani [21:48:50] errr.. in the Beta Cluster blocklist :) [21:49:10] heh, no problem :) [21:49:23] you all made it easy [21:50:09] CIDR math is hopefully the hard part at this point [21:50:44] netmask did that part for me [21:50:55] it's like the problems we have onwiki [21:51:02] how large or small a range should we be blocking... [21:51:17] a user? an ISP? their whole ASN? a country? [21:59:56] yeah. range blocks are perilous [22:05:12] 10Beta-Cluster-Infrastructure, 07Documentation: Improve documentation for Beta Cluster edge blocking - https://phabricator.wikimedia.org/T392643 (10bd808) 03NEW [22:24:13] (03approved) 10bd808: spiderpig: Revise /api/searchPatch interface [repos/releng/scap] - 10https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/768 (https://phabricator.wikimedia.org/T392591) (owner: 10dancy) [22:44:06] 10Beta-Cluster-Infrastructure: High load on deployment-mediawiki14 and slow responses - https://phabricator.wikimedia.org/T392534#10766955 (10Krinkle) FYI: @thcipriani punched a hole for my home ISP in London. https://whois-dev.toolforge.org/w/143.58.160.0/lookup https://gerrit.wikimedia.org/r/plugins/giti... [23:02:44] 10Phabricator maintenance bot, 10SectionTranslation: Complete enablement Section Translation in new wikis and make the process less manual for the future - https://phabricator.wikimedia.org/T371420#10767020 (10Pppery) Was this done in https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/1130169? It s... [23:03:34] 10WikimediaDebug, 10Arc-Lamp, 10observability, 07Regression: https://performance.wikimedia.org/php-profiling/ leads to 404 for all listed sources - https://phabricator.wikimedia.org/T391516#10767035 (10ori) 05Openβ†’03Resolved a:03ori [23:20:10] 10Phabricator, 06Security-Team, 07SecTeam-Processed: Audit Phabricator security policies and groups membership - https://phabricator.wikimedia.org/T391150#10767092 (10Dzahn) Gotcha! That sounds good. Thanks @sbassett [23:37:23] 10Release-Engineering-Team (Yak Shaving πŸƒπŸͺ’), 10Scap (SpiderPig πŸ•ΈοΈ): SpiderPig should support train deployments - https://phabricator.wikimedia.org/T392610#10767111 (10thcipriani) [23:37:40] 10Release-Engineering-Team (Yak Shaving πŸƒπŸͺ’), 10Scap (SpiderPig πŸ•ΈοΈ), 13Patch-For-Review: Support pasting Gerrit URLs into SpiderPig - https://phabricator.wikimedia.org/T392591#10767115 (10thcipriani) [23:42:40] 10Release-Engineering-Team (Doing 😎), 06MediaWiki-Gerrit-Group-Requests, 07Essential-Work: Update members of wmde-mediawiki Gerrit group - https://phabricator.wikimedia.org/T391625#10767121 (10thcipriani) [23:42:50] 10GitLab (Account Approval), 06Release-Engineering-Team, 07Essential-Work: Requesting GitLab account activation for [Ironblade101] - https://phabricator.wikimedia.org/T391203#10767122 (10thcipriani) [23:43:44] 10GitLab (Project Migration), 06Release-Engineering-Team, 10m3api, 07Essential-Work: Create new GitLab project group: m3api - https://phabricator.wikimedia.org/T392323#10767123 (10thcipriani) [23:45:11] 06Release-Engineering-Team, 10Scap (SpiderPig πŸ•ΈοΈ), 07OKR-Work: SpiderPig UI: improve job status - https://phabricator.wikimedia.org/T383853#10767124 (10thcipriani)