[04:58:41] 10serviceops, 10Abstract Wikipedia team: Sandboxing Strategy for Wikifunctions - https://phabricator.wikimedia.org/T343829 (10Joe) https://code.google.com/archive/p/seccompsandbox/wikis/overview.wiki seems like an interesting short-to-mid-term solution - or an inspiration for a solution- for the protections yo... [05:48:21] 10serviceops, 10Abstract Wikipedia team: Sandboxing Strategy for Wikifunctions - https://phabricator.wikimedia.org/T343829 (10Joe) Thinking more about this, I think compiling a javascript and python interpreters to wasm, include those in your containers together with a wasm runtime would be our best option eve... [08:01:10] 10serviceops, 10Data-Platform-SRE, 10Discovery-Search (Current work): Requesting permission to use kafka-main cluster to transport CirrusSearch updates - https://phabricator.wikimedia.org/T341625 (10elukey) Hi folks! I had a chat with Joe and the plan looks good, +1 to proceed. A few considerations to keep... [08:01:16] inflatador: o/ --^ [09:47:44] 10serviceops, 10Prod-Kubernetes, 10Kubernetes, 10Patch-For-Review: Use cert-manager for service-proxy certificate creation - https://phabricator.wikimedia.org/T300033 (10JMeybohm) [10:01:04] 10serviceops, 10Prod-Kubernetes, 10Kubernetes, 10Patch-For-Review: Use cert-manager for service-proxy certificate creation - https://phabricator.wikimedia.org/T300033 (10JMeybohm) [10:25:07] 10serviceops, 10collaboration-services, 10GitLab (CI & Job Runners): Standardize Debian package builds on GitLab CI - https://phabricator.wikimedia.org/T304491 (10MatthewVernon) An example is https://gitlab.wikimedia.org/repos/data_persistence/swift/-/blob/dgit/bullseye-wikimedia/debian/.wmf-gitlab-ci.yml -... [10:30:26] 10serviceops, 10Data Products, 10RESTbase Sunsetting, 10Code-Health-Objective, 10Patch-For-Review: Route to new AQS Knowledge Gaps endpoint - https://phabricator.wikimedia.org/T342213 (10hnowlan) It appears the endpoint has not been deployed to all AQS servers: ` hnowlan@deploy1002:~$ for i in `seq 0 9`... [12:54:33] 10serviceops, 10Prod-Kubernetes, 10Kubernetes: Use cert-manager for service-proxy certificate creation - https://phabricator.wikimedia.org/T300033 (10JMeybohm) [13:47:56] folks I am going to deploy changeprop to apply https://gerrit.wikimedia.org/r/c/operations/deployment-charts/+/947328 [13:48:07] (lift wing stream) [13:49:16] ack [14:59:35] <_joe_> oh look kamila_ hnowlan ^^ :) [14:59:49] <_joe_> a candidate for migration off of changeprop possibly! [15:03:06] wow, yeah! :) [15:40:38] <_joe_> elukey is playing possum, but he won't escape... [15:42:36] migration off changeprop? [15:42:50] * elukey feels scared [15:46:10] * kamila_ feels scared too, but differently [15:50:31] <_joe_> good, I see you're both aware [15:58:04] 10serviceops, 10Prod-Kubernetes, 10Kubernetes, 10Patch-For-Review: Use cert-manager for service-proxy certificate creation - https://phabricator.wikimedia.org/T300033 (10jijiki) [16:09:55] 10serviceops, 10Data Products, 10RESTbase Sunsetting, 10Code-Health-Objective, 10Patch-For-Review: Route to new AQS Knowledge Gaps endpoint - https://phabricator.wikimedia.org/T342213 (10BTullis) Thanks @hnowlan - I checked and it looks like the scap targets for aqs weren't up-to date, so I made https://... [16:26:51] 10serviceops, 10Data Products, 10RESTbase Sunsetting, 10Code-Health-Objective, 10Patch-For-Review: Route to new AQS Knowledge Gaps endpoint - https://phabricator.wikimedia.org/T342213 (10hnowlan) >>! In T342213#9081374, @BTullis wrote: > Thanks @hnowlan - I checked and it looks like the scap targets for...