[08:29:54] 10netbox, 10Infrastructure-Foundations: Make more extensive use of Netbox custom fields - https://phabricator.wikimedia.org/T305126 (10ayounsi) 05Open→03Stalled p:05Triage→03Low [08:30:12] 10netbox, 10Infrastructure-Foundations: Make more extensive use of Netbox custom fields - https://phabricator.wikimedia.org/T305126 (10ayounsi) [08:30:14] 10netbox, 10Infrastructure-Foundations: Upgrade Netbox to 3.2 - https://phabricator.wikimedia.org/T296452 (10ayounsi) [12:47:20] 10netops, 10Infrastructure-Foundations, 10SRE, 10Patch-For-Review: Suboptimal anycast routing from leaf switches - https://phabricator.wikimedia.org/T302315 (10ayounsi) 05Open→03Resolved DoH is advertised from drmrs, I'll leave it to Traffic to decide about the anycast NS. [13:29:15] following up from yesterday, it was indeed an SSH config error on my side. Thanks for your patience v-olans! [13:41:39] no prob, anytime :) [13:41:50] thanks for closing the loop [13:49:46] going to reboot netmon1002 in a bit, speak up if it's a bad time [13:51:07] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10ayounsi) On that second part, we discussed it within Infrastructure Foundation. With the webproxies (and url-downloade... [14:25:16] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10Isaac) Chiming in as a heavy user of the stat boxes. It's difficult for me to follow this conversation so I'm mainly as... [14:40:23] 10SRE-tools, 10Infrastructure-Foundations, 10Prod-Kubernetes, 10SRE, 10Kubernetes: Create Spicerack cook book to drain/reboot/uncordon a Kubernetes worker - https://phabricator.wikimedia.org/T212866 (10JMeybohm) [14:45:57] 10SRE-tools, 10Infrastructure-Foundations, 10Prod-Kubernetes, 10SRE, 10Kubernetes: Create Spicerack cookbook to drain/reboot/uncordon a Kubernetes worker - https://phabricator.wikimedia.org/T212866 (10Volans) [15:09:23] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10Ottomata) > malware accidentally downloaded (compromised library dependency, infected executable, etc) could easily "ph... [15:36:09] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10BTullis) >>! In T300977#7821926, @Ottomata wrote: > > I appreciate the intention here, but I'm not sure if the combo o... [15:40:24] 10netops, 10Data-Engineering, 10Infrastructure-Foundations, 10Product-Analytics, and 2 others: Maybe restrict domains accessible by webproxy - https://phabricator.wikimedia.org/T300977 (10Ottomata) > its primary goal is limiting the capability of any such malware to 'phone home' to a command & control endp...