[09:01:14] 10serviceops, 10Kubernetes: Show less diff context by default on helm apply - https://phabricator.wikimedia.org/T326205 (10fgiunchedi) Thank you for taking a look Clement, appreciate it! A bummer this can't work out of the box with helmfile now :( I'm wondering if upstream might be interested ? [09:33:07] 10serviceops, 10Arc-Lamp, 10Performance-Team (Radar), 10SRE Observability (FY2022/2023-Q3), 10User-fgiunchedi: Expand RAM on arclamp hosts and move them to baremetal - https://phabricator.wikimedia.org/T316223 (10fgiunchedi) [09:33:30] 10serviceops, 10SRE, 10User-fgiunchedi: service implementation tracking: arclamp2001.codfw.wmnet - https://phabricator.wikimedia.org/T319429 (10fgiunchedi) [10:34:06] 10serviceops, 10Prod-Kubernetes, 10Kubernetes, 10Patch-For-Review: Update staging-codfw to k8s 1.23 - https://phabricator.wikimedia.org/T326340 (10JMeybohm) [10:40:52] 10serviceops, 10Prod-Kubernetes, 10Kubernetes, 10Patch-For-Review: Update staging-codfw to k8s 1.23 - https://phabricator.wikimedia.org/T326340 (10JMeybohm) [12:18:06] 10serviceops, 10Content-Transform-Team-WIP, 10Maps: Re-import full planet data into eqiad and codfw - https://phabricator.wikimedia.org/T314472 (10awight) [14:01:30] jayme: thanks for comment and +1, responded. added my reasoning for adding app: flink-app label there. given that, would still prefer I removed it? I don't mind either way. [14:05:25] ottomata: yeah, I read that but I'm not super sure what you wanted to achieve by that "assotiation" at is very much cosmetial AIUI [14:06:26] I don't have strong feelings about that so go with whatever suits you :) [14:11:06] i guess just visbility? [14:11:24] jayme: i also dont' have strong feelings. whos weak feelings are stronger? [14:12:09] you are my k8s guru so i'm going to go with your recommendation here. It will be one less hardcoded label [14:13:23] eheh, leave it like this I'd say so you don't have to create another patchset. We will have to revisit this anyways after 1.23 [14:13:32] too late [14:13:34] hrhr [14:14:42] jayme: the flink-kubernetes-operator helm chart creates resources in the watchNamespaces [14:14:44] e.g. [14:14:45] https://gerrit.wikimedia.org/r/plugins/gitiles/operations/deployment-charts/+/refs/heads/master/charts/flink-kubernetes-operator/templates/serviceaccount.yaml#40 [14:14:59] https://gerrit.wikimedia.org/r/plugins/gitiles/operations/deployment-charts/+/refs/heads/master/charts/flink-kubernetes-operator/templates/rbac.yaml#109 [14:15:19] oops..okay [14:15:51] in that case 🤷 - as we're already in that situation :) [14:16:49] heheh [14:17:18] heh, those created resources don't have app:flink-app soooo networkpolicy shoudln't either, or consistency! [14:17:30] for* [14:38:50] yes, makes sense [14:38:54] I've [14:39:02] *I've +1ed [14:39:50] and I will be out on PTO next week, just so you know to not expect anything from me next week [14:43:55] oh okay good to know. well good thign this is the last patch and everythign will work now [14:45:28] jayme: is there someone i can/should ask for review of further patches next week? [14:47:31] 10serviceops, 10Abstract Wikipedia team (Phase θ – Throttling), 10Patch-For-Review: Kubernetes Wikifunctions security and control measures - https://phabricator.wikimedia.org/T326785 (10JMeybohm) Thanks for writing this, very good read! Sounds pretty sensible to focus on AppArmor for now (apart from the obvi... [14:47:53] eheh, you're very positive on this :) [14:50:16] you can always ask j.oe and a.kosiaris - they might be lacking some background but they'll manage :) [14:52:26] I don't want to volunteer anyone but k.lausman said he and Luca might be able to help [14:58:06] k ty i will try those nicks without the . next week [19:32:26] akosiaris when you get a chance, please help add me to any other IRC channels that I need to part of