[12:47:20] <elukey>	 hello oncallers!
[12:47:33] <elukey>	 ah it is batphone
[12:47:51] <elukey>	 okok so just as FYI, I am going to complete the rollout of cfssl to swift
[12:48:00] <elukey>	 yesterday we did eqiad, today I'll do codfw
[12:48:14] <elukey>	 cc: Emperor: 
[12:48:37] <elukey>	 change is https://gerrit.wikimedia.org/r/c/operations/puppet/+/1028860
[12:49:55] <Emperor>	 thanks :)
[12:58:35] <elukey>	 all right ms-fe2009 just repooled with the new cert
[13:02:09] <Emperor>	 👍
[13:03:39] <elukey>	 2010 done as well
[13:07:54] <elukey>	 2011 done, 3 to go
[13:14:05] <elukey>	 2012 done
[13:19:13] <elukey>	 2013 done, last one
[13:19:33] <inflatador>	 （ ^_^）o自自o（^_^ ） ＣＨＥＥＲＳ！
[13:21:37] <Emperor>	 \o/
[13:23:10] <elukey>	 aand done! \o/
[13:23:31] <volans>	 \o/
[15:51:30] <Emperor>	 Are hostkey changes expected in deployment-prep (and not picked up by wmf-update-known-hosts-production)? I'm getting a hostkey change error on deployment-ms-fe04.deployment-prep.eqiad1.wikimedia.cloud even after re-running w-u-k-h-p
[16:02:43] <volans>	 wmf-update-known-hosts-production as the name suggests takes care only of production ;)
[16:03:35] <taavi>	 previously there was https://config-master.wikimedia.beta.wmflabs.org/known_hosts that could have been used for the same purpose but that seems to have broken at some point
[16:16:50] <Emperor>	 so I should just delete the old key and TOFU for cloud hosts?
[16:16:56] <Emperor>	 [sorry, Trust On First Use]
[21:07:19] <jhathaway>	 anyone know the magic curl incantation for acmechief's puppet filesystem api from a host for debugging?
[21:13:51] <vgutierrez>	 It's puppet file api
[21:15:22] <vgutierrez>	 Easiest way of getting the whole URL would be checking acmechief nginx access log
[21:15:52] <vgutierrez>	 Add mTLS on top and you should have it
[21:20:36] <jhathaway>	 vgutierrez: thanks
[21:22:23] <vgutierrez>	 Let me know if you get it.. otherwise I'll take a look tomorrow morning and drop the curl line
[21:22:39] <jhathaway>	 will do
[22:11:14] <jhathaway>	 vgutierrez: figured it out, and opened a ticket for a feature request :), https://phabricator.wikimedia.org/T364589