[09:47:03] 10serviceops, 10iPoid-Service: Unable to deploy ipoid to staging or eqiad - https://phabricator.wikimedia.org/T354768 (10jijiki) 05Open→03Resolved a:03jijiki We merged a fix to unblock this, your are good to go. [09:55:58] 10serviceops, 10Infrastructure-Foundations, 10Prod-Kubernetes, 10SRE, and 3 others: Update puppet's topology.kubernetes.io/zone logic to take into account the new setup - https://phabricator.wikimedia.org/T352893 (10ayounsi) >>! In T352893#9450804, @akosiaris wrote: > I 've been fearing this and started th... [10:32:01] 10serviceops, 10Infrastructure-Foundations, 10Puppet-Core, 10SRE, and 3 others: Migrate roles to puppet7 - https://phabricator.wikimedia.org/T349619 (10MoritzMuehlenhoff) [10:47:42] jelto: eoghan: I have a follow up config change from the Gerrit 3.6.8 https://gerrit.wikimedia.org/r/c/operations/puppet/+/989735/ :) [10:49:16] that can be merged anytime [10:49:38] Gerrit requires a restart to get it applied, then I have to prepare lunch (one of my kid is sick at home) [10:49:40] so no rush :) [10:50:32] hashar: looks good to me, I'll merge the change soon [10:54:22] thx! [10:54:34] I will restart Gerrit after lunch [10:54:41] hashar: merged, btw puppet is still disabled on gerrit2002 [11:01:06] 10serviceops, 10Infrastructure-Foundations, 10Prod-Kubernetes, 10SRE, and 3 others: Update puppet's topology.kubernetes.io/zone logic to take into account the new setup - https://phabricator.wikimedia.org/T352893 (10cmooney) >>! In T352893#9452446, @ayounsi wrote: >>>! In T352893#9450804, @akosiaris wrote:... [12:06:48] Hello. I'd like to add Java 8 (JRE and JDK) images to production-images. https://gerrit.wikimedia.org/r/c/operations/docker-images/production-images/+/989786 - It looks like we still need Java 8 for Hadoop compatibility. It someone could have a look pleas, I'd be grateful. [12:07:04] *if [12:40:11] 10serviceops, 10Infrastructure-Foundations, 10Prod-Kubernetes, 10SRE, and 3 others: Update puppet's topology.kubernetes.io/zone logic to take into account the new setup - https://phabricator.wikimedia.org/T352893 (10ayounsi) > The problem remains that the switch name is not going to be enough to know what... [12:42:24] 10serviceops, 10Infrastructure-Foundations, 10Prod-Kubernetes, 10SRE, and 3 others: Update puppet's topology.kubernetes.io/zone logic to take into account the new setup - https://phabricator.wikimedia.org/T352893 (10cmooney) >>! In T352893#9452969, @ayounsi wrote: > Yep, I mentioned it in the loooong Gerri... [12:42:53] btullis: at a quick glance, that is how I have done it for the CI java8 image ( Bullseye + component/jdk8 ) [12:45:08] I guess the jdk one could inherit frmo the jre one using: `FROM {{ "openjdk-8-jre" | image_tag }}` which saves you from repeating the injection of component/jdk8 [12:50:18] 10serviceops: Service mesh envoy does not treat incoming connections as local - https://phabricator.wikimedia.org/T354853 (10JMeybohm) [12:53:04] 10serviceops: Service mesh envoy does not treat incoming connections as local - https://phabricator.wikimedia.org/T354853 (10JMeybohm) [12:53:07] jelto: the Gerrit config change fixed the issue I had. Thanks! [12:53:32] hashar: good to hear that, thanks for coming up with the fix [13:11:07] 10serviceops: Upgrade the MediaWiki servers to ICU 67 - https://phabricator.wikimedia.org/T345561 (10MoritzMuehlenhoff) [13:11:25] 10serviceops, 10SRE: Rebuild PHP 7.4 packages for Bullseye - https://phabricator.wikimedia.org/T350767 (10MoritzMuehlenhoff) 05Open→03Resolved The packages have been rebuilt and appear to install fine on snapshot1014. [13:32:42] 10serviceops, 10Infrastructure-Foundations, 10SRE: ferm sometimes fails to restart on Kubernetes workers via xtables lock held by kube-proxy - https://phabricator.wikimedia.org/T354855 (10MoritzMuehlenhoff) [13:32:52] 10serviceops, 10Infrastructure-Foundations, 10SRE: ferm sometimes fails to restart on Kubernetes workers via xtables lock held by kube-proxy - https://phabricator.wikimedia.org/T354855 (10MoritzMuehlenhoff) p:05Triage→03Medium [14:39:05] 10serviceops, 10Infrastructure-Foundations, 10Prod-Kubernetes, 10SRE, 10netops: Test IP-renumbering on kubestage2002.codfw.wmnet - https://phabricator.wikimedia.org/T352883 (10cmooney) [14:40:11] 10serviceops, 10Infrastructure-Foundations, 10Prod-Kubernetes, 10SRE, and 3 others: Update puppet's topology.kubernetes.io/zone logic to take into account the new setup - https://phabricator.wikimedia.org/T352893 (10cmooney) [15:34:26] 10serviceops, 10Prod-Kubernetes, 10Data-Platform-SRE (2023/24 Q3 Milestone 1), 10Kubernetes, 10Patch-For-Review: Improve how we address outside k8s infrastructure from within charts (e.g. network policies) - https://phabricator.wikimedia.org/T331894 (10brouberol) I have written two different CRs: - https... [16:06:00] 10serviceops, 10Infrastructure-Foundations, 10Puppet-Core, 10SRE, and 4 others: Migrate roles to puppet7 - https://phabricator.wikimedia.org/T349619 (10MoritzMuehlenhoff)