[09:59:33] 10netops, 10Infrastructure-Foundations, 10SRE, 10Traffic: Reverse DNS zones includes for drmrs - https://phabricator.wikimedia.org/T301447 (10Volans) [09:59:39] 10netops, 10Infrastructure-Foundations, 10SRE, 10Traffic: Reverse DNS zones includes for drmrs - https://phabricator.wikimedia.org/T301447 (10Volans) p:05Triage→03Medium [10:35:39] volams: [10:35:50] s/m/n/ [10:35:59] volans: hi :D [10:36:06] good morning :) [10:36:09] haha [10:36:30] I seen that task about drmrs reverse zones [10:37:05] I can take care of it if you want? [10:37:33] if you can that would be great, as you have the context if that's ok or maybe not yet for some reason [10:39:07] Yeah it’s easy enough I’ve a little script to generate that junk from the ones yesterday [10:39:16] topranks: how does https://gerrit.wikimedia.org/r/c/operations/homer/public/+/761435 look to you ? if it looks good I'd like to use homer myself, I'm guessing homer 'cr*' diff + homer 'cr*' commit "" ? [10:42:22] godog: hey yeah looks perfect +1 [10:42:38] godog: homer commit does show you the diff and ask for confirmation anyway, so if you're fairly confident you can even skip the homer diff [10:42:44] as you want :) [10:42:45] topranks: cheers! [10:42:51] Your commands are spot on [10:42:55] to run homer [10:42:55] volans: ok! thanks, yeah I might go straight for commit then [10:43:42] yeah I've sort of stopped bothering with the 'diff' myself as you can back out of a 'commit' if you don't like the look of it. [10:44:57] make sense to me yeah [10:45:23] arturo will be deploying the change btw, I'll do the next one as I'm decom'ing hosts [13:20:22] 10SRE-tools, 10Infrastructure-Foundations, 10Observability-Alerting: Spicerack: add support for Alertmanager - https://phabricator.wikimedia.org/T293209 (10fgiunchedi) >>! In T293209#7675048, @fgiunchedi wrote: >>>! In T293209#7670485, @Volans wrote: >> I had a chat with @jbond about this yesterday, putting... [13:41:16] 10puppet-compiler, 10Infrastructure-Foundations, 10SRE, 10User-jbond: puppet-catalog-compiler: compilation result randomly places servers in the 'failed' section - https://phabricator.wikimedia.org/T224977 (10jbond) Still seem to be having issues here, in the following deployment-deploy03.deployment-prep.e... [13:55:25] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10dcausse) For some production jobs we still use the proxy to access: - MW APIs (all our sites) - ores.wikimedia.org For... [14:05:41] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10Ottomata) > MW APIs (all our sites) BTW, the proper way to access MW APIs from within our networks is to use e.g. https... [14:39:00] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10akosiaris) >>! In T300977#7700725, @Ottomata wrote: >> MW APIs (all our sites) > BTW, the proper way to access MW APIs... [14:43:57] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10Ottomata) > avoiding a SPOF (there aren't that many web proxies nor is it a highly available setup cause there isn't an... [14:47:02] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10jbond) > This has bitten me before when I used to use the webproxy internally. Don't do it! :) Its worth mentioning th... [15:19:25] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10Ottomata) Hahah, maybe what we should do is excludelist the internal domains in the webproxy! [15:21:41] 10Puppet, 10Infrastructure-Foundations, 10MobileFrontend (Tracking), 10User-Jdlrobson: Mobile site does not automatically redirect to desktop version (and not possible to use browser "use desktop view") - https://phabricator.wikimedia.org/T60425 (10ovasileva) [15:44:03] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10mpopov) A couple of questions/comments: >>! In T300977#7700842, @jbond wrote: > Its worth mentioning that when i took... [16:01:04] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10EBernhardson) > Oh and ORES is also available under https://ores.discovery.wmnet (and it's the exact same service!) Do... [16:01:26] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10mpopov) > **First**: How difficult & how much overhead would it be to make the proxy redirect requests made to internal... [16:05:01] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10Ottomata) > Is the intention to allow us to talk to prod in a more general fashion then? I think so, see the parent tic... [16:29:43] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10jbond) > First: How difficult & how much overhead would it be to make the proxy redirect requests made to internal doma... [16:35:01] 10netops, 10Infrastructure-Foundations, 10SRE, 10Traffic: Reverse DNS zones includes for drmrs - https://phabricator.wikimedia.org/T301447 (10cmooney) Added to patch for new Eqiad includes: https://gerrit.wikimedia.org/r/c/operations/dns/+/761473 [18:23:47] 10netops, 10Infrastructure-Foundations, 10SRE, 10Traffic: Reverse DNS zones includes for drmrs - https://phabricator.wikimedia.org/T301447 (10cmooney) 05Open→03Resolved a:03cmooney Working ok after merge: ` cmooney@wikilap:~/repos/random_wmf/netbox_scripts$ dig +noall +answer -x 2620:0:860:fe0a::1 @n...