[07:44:15] ottomata: yes they do. Unfortunately there is no clear source address for them as well so you'd need to allow access in general [08:28:16] 10serviceops, 10SRE: k8s/mw: traffic to eventgate dropped by iptables - https://phabricator.wikimedia.org/T249700 (10akosiaris) Adding one more data point that just might be in some cases related: in T292663 we noticed (after going first down the wrong rabbithole) that in some cases we have connections `mw (en... [09:44:18] 10serviceops, 10MW-on-K8s: Allow setting draining strategy and time in envoy image - https://phabricator.wikimedia.org/T338014 (10Clement_Goubert) [09:45:54] 10serviceops, 10MW-on-K8s: Allow setting draining strategy and time in envoy image - https://phabricator.wikimedia.org/T338014 (10Clement_Goubert) 05Open→03In progress p:05Triage→03High [09:46:00] 10serviceops, 10MW-on-K8s, 10Patch-For-Review: httpbb fails requesting mw-on-k8s during deployments - https://phabricator.wikimedia.org/T331609 (10Clement_Goubert) [11:14:18] 10serviceops, 10MW-on-K8s, 10SRE, 10Traffic, and 2 others: Serve production traffic via Kubernetes - https://phabricator.wikimedia.org/T290536 (10Clement_Goubert) [11:15:01] 10serviceops, 10MW-on-K8s, 10SRE, 10Traffic, and 3 others: Migrate group0 to Kubernetes - https://phabricator.wikimedia.org/T337490 (10Clement_Goubert) 05Open→03Stalled Blocked by {T331609} [12:32:18] jayme: https://gerrit.wikimedia.org/r/c/operations/deployment-charts/+/926479 [12:39:35] looks good [21:14:50] 10serviceops, 10Arc-Lamp, 10Performance-Team, 10WikimediaDebug, 10Patch-For-Review: Add per-request flamegraph option to WikimediaDebug - https://phabricator.wikimedia.org/T291015 (10Krinkle)