[06:16:15] 10netops, 10Infrastructure-Foundations, 10SRE, 10ops-codfw: Upgrade new codfw switches to Juniper recommended - https://phabricator.wikimedia.org/T341670 (10ayounsi) [06:16:23] 10netops, 10Infrastructure-Foundations, 10SRE, 10Patch-For-Review: TLS certificates for network devices - https://phabricator.wikimedia.org/T334594 (10ayounsi) [07:21:46] 10Puppet, 10Infrastructure-Foundations, 10Puppet CI, 10SRE, and 2 others: puppet master command will be removed in puppet 6 - https://phabricator.wikimedia.org/T236373 (10hashar) //[[ https://fr.wiktionary.org/wiki/p%E2%80%99t%C3%AAt_ben_qu%E2%80%99oui,_p%E2%80%99t%C3%AAt_ben_qu%E2%80%99non | m'ybe yes, m'... [07:31:51] 10netops, 10Infrastructure-Foundations, 10SRE, 10cloud-services-team: Configure cloudsw1-b1-codfw and migrate cloud hosts in codfw B1 to it - https://phabricator.wikimedia.org/T327919 (10ayounsi) The last host connected to asw-b1-codfw (the prod switch) is cloudweb2002-dev (https://netbox.wikimedia.org/dci... [08:26:08] 10Puppet, 10Infrastructure-Foundations, 10Puppet CI, 10SRE, and 2 others: puppet master command will be removed in puppet 6 - https://phabricator.wikimedia.org/T236373 (10jbond) @hashar thanks for the write up and the CR's, this all looks quite promising. ill work on getting pcc-worker4 up and running. [09:25:55] jbond: I've been doing a bit of testing on this one: https://phabricator.wikimedia.org/T228966, I don't think it's actually an issue anymore. Either way the patched version works just like the original [09:34:23] 10Puppet, 10Observability-Alerting, 10SRE, 10Patch-For-Review, 10User-jbond: Create NRPE check to alert when cergen certificates are due to expire - https://phabricator.wikimedia.org/T238833 (10fgiunchedi) IMHO between the migration to pki and the fact that we monitor cert expiration directly from probes... [10:12:26] 10Puppet, 10Infrastructure-Foundations, 10Puppet CI, 10SRE, and 2 others: puppet master command will be removed in puppet 6 - https://phabricator.wikimedia.org/T236373 (10hashar) For the job being run manually, I have made a copy at https://integration.wikimedia.org/ci/job/operations-puppet-catalog-compile... [10:12:47] jbond: that is all I got for today :-] [10:13:22] I guess once you have a Puppet 7 pcc worker available we can add it to the Jenkins controller, roll the couple changes I have proposed and see what happens [10:19:32] slyngs: lets push the [patched version then i think its an improvment either way [10:20:21] hashar: cheers, will hopefully have a puppet7 worker by the end of the day [10:53:13] 10SRE-tools, 10Infrastructure-Foundations: Package pyGNMI and dictdiffer to be used by cookbooks - https://phabricator.wikimedia.org/T340045 (10ayounsi) [10:53:15] 10netops, 10Infrastructure-Foundations, 10SRE: Add Dell switches support to Homer/Cookbooks - https://phabricator.wikimedia.org/T320638 (10ayounsi) [10:53:23] 10netops, 10Infrastructure-Foundations, 10SRE, 10Patch-For-Review: Users management on SONiC - https://phabricator.wikimedia.org/T338028 (10ayounsi) [12:23:13] 10CAS-SSO, 10Infrastructure-Foundations, 10SRE, 10collaboration-services, and 4 others: migrate gitlab away from the CAS protocol - https://phabricator.wikimedia.org/T320390 (10SLyngshede-WMF) Depending on how the Gitlab OIDC pulls information we might have to change: userinfo_endpoint in client config opt... [13:34:42] 10SRE-tools, 10Infrastructure-Foundations, 10Spicerack, 10cloud-services-team (FY2022/2023-Q4): [spicerack] support including {project} in SAL messages - https://phabricator.wikimedia.org/T341793 (10fnegri) [13:41:24] 10SRE-tools, 10Infrastructure-Foundations, 10Patch-For-Review, 10cloud-services-team (FY2022/2023-Q4): Allow wmcs cookbooks running on cloudcuminXXXX to write to the SAL - https://phabricator.wikimedia.org/T325756 (10fnegri) Recap after the latest chat with @volans: * log messages follow this path: cookbo... [14:31:32] 10CAS-SSO, 10Infrastructure-Foundations, 10SRE, 10collaboration-services, and 4 others: migrate gitlab away from the CAS protocol - https://phabricator.wikimedia.org/T320390 (10SLyngshede-WMF) We didn't find a solution yet, but I'll spend some time looking into the CAS side of things tomorrow. [14:33:11] https://phabricator.wikimedia.org/phame/post/view/304/multi-platform_network_configuration/ is now public [15:02:16] XioNoX: very cool! thank you for the write up [15:03:03] I'd award a token though apparently I can't because the post is locked  [15:04:12] no idea how/why :) [15:07:42] oh well, thank you again though! [15:10:41] 10CAS-SSO, 10Infrastructure-Foundations, 10SRE, 10collaboration-services, and 4 others: migrate gitlab away from the CAS protocol - https://phabricator.wikimedia.org/T320390 (10Arnoldokoth) @Jelto @SLyngshede-WMF I believe my login works now. I did sign in to the replica and I can see `Signed in with ope... [15:30:10] nice work XioNoX [15:43:16] indeed very cool XioNoX [16:13:08] 10netops, 10Infrastructure-Foundations, 10SRE, 10cloud-services-team: Configure cloudsw1-b1-codfw and migrate cloud hosts in codfw B1 to it - https://phabricator.wikimedia.org/T327919 (10cmooney) >>! In T327919#9011559, @ayounsi wrote: > The last host connected to asw-b1-codfw (the prod switch) is cloudweb... [16:18:46] godog: `Comments have been disabled for this post.` :) [16:18:56] which I guess implies no possibility to grant a token [16:28:25] hashar, godog, I think I fixed it [16:28:42] thanks for the feedback! don't hesitate to ask if something is not clear [16:59:33] XioNoX: I have left network when netconf was being envisioned (and considered adopting it to replace our home made conf generation system) [17:00:26] anyway that is a great post! [18:08:27] 10netops, 10Infrastructure-Foundations, 10SRE, 10cloud-services-team: Configure cloudsw1-b1-codfw and migrate cloud hosts in codfw B1 to it - https://phabricator.wikimedia.org/T327919 (10Papaul) @cmooney I am ok moving the server when it is ready. We can move it to B5/U20 ge-5/0/15. Also I see that asw-b1... [19:45:40] XioNoX: would you be interested in publishing that on techblog.wikimedia.org?