[08:03:26] hello folks! [08:04:24] I'd need an info about haproxy, since I am trying to upgrade the Docker image that we have in our registry [08:04:38] we currently have haproxy 2.4 on buster, and I'd like to move to Bookworm [08:04:46] ok [08:04:46] but I see multiple components/versions [08:05:01] any recommendation about what's the right/best choice? [08:05:21] the majority of our haproxy (all cp hosts) now uses 2.8.10 on bullseye [08:06:14] we have some bookworm hosts (for test) with 2.8 too [08:06:42] I would say the haproxy28 component is the Right Choice ™️ [08:06:57] okok so I'll try to build 2.8, it is used for Thumbor IIUC, so some testing will be needed but the Traffic choice seems a good start [08:07:00] thanks! [08:07:23] we still have some 2.6 somewhere but I would say pretty much everything is migrated to 2.8 [08:07:49] (if you want to try 3.0 and do us a favor with beta testing you-re more than welcome :D ) [08:10:15] nono I am not that adventurous, I'd just like to not see buster on k8s :D [08:10:45] sure, I was joking, let me know if you need some help w/ this! [08:27:44] 10netops, 06Infrastructure-Foundations, 13Patch-For-Review: Capirca setup for routed Ganeti VMs - https://phabricator.wikimedia.org/T367265#9952956 (10ayounsi) 05Open→03Resolved Import script fixed and orphaned IP for the now deleted sretest2005 removed. [09:58:54] 10netops, 06Infrastructure-Foundations, 06SRE, 13Patch-For-Review: No unicast IP ranges announced to peers from eqdfw - https://phabricator.wikimedia.org/T367439#9953260 (10cmooney) Ok change merged, we are now announcing codfw ranges from eqord again: ` cmooney@cr2-eqord> show route advertising-protocol b... [10:40:14] 10netops, 06DC-Ops, 06Infrastructure-Foundations, 10ops-codfw, 06SRE: codfw row C/D upgrade racking task - https://phabricator.wikimedia.org/T360789#9953434 (10cmooney) >>! In T360789#9941103, @Papaul wrote: > All the cabling is done. I am leaving this task open so when we move the console cables from as... [10:45:39] 10netops, 06Infrastructure-Foundations, 06SRE: Move asw-c-codfw and asw-d-codfw CR uplinks to Spine switches - https://phabricator.wikimedia.org/T366941#9953449 (10cmooney) @papaul sorry I meant to get back to you sooner. I've made decent progress on T369106 and managed to test reimage working ok in one of... [10:45:40] 10netops, 06Infrastructure-Foundations, 06SRE: Move asw-c-codfw and asw-d-codfw CR uplinks to Spine switches - https://phabricator.wikimedia.org/T366941#9953452 (10cmooney) [10:47:21] 10netops, 06Infrastructure-Foundations, 06SRE: Move asw-c-codfw and asw-d-codfw CR uplinks to Spine switches - https://phabricator.wikimedia.org/T366941#9953455 (10cmooney) [11:19:01] 10netops, 06Infrastructure-Foundations, 06SRE: Move IP gateways for codfw row C/D vlans to EVPN Anycast GW - https://phabricator.wikimedia.org/T369274 (10cmooney) 03NEW p:05Triage→03Medium [11:19:31] 10netops, 06Infrastructure-Foundations, 06SRE: Move IP gateways for codfw row C/D vlans to EVPN Anycast GW - https://phabricator.wikimedia.org/T369274#9953512 (10cmooney) [11:19:32] 10netops, 06DC-Ops, 06Infrastructure-Foundations, 10ops-codfw, 06SRE: Codfw row C/D switch installation & configuration - https://phabricator.wikimedia.org/T364095#9953513 (10cmooney) [11:20:02] 10netops, 06Infrastructure-Foundations, 06SRE: Move asw-c-codfw and asw-d-codfw CR uplinks to Spine switches - https://phabricator.wikimedia.org/T366941#9953514 (10cmooney) [11:20:04] 10netops, 06Infrastructure-Foundations, 06SRE: Move IP gateways for codfw row C/D vlans to EVPN Anycast GW - https://phabricator.wikimedia.org/T369274#9953515 (10cmooney) [11:20:05] 10netops, 06DC-Ops, 06Infrastructure-Foundations, 10ops-codfw, 06SRE: Codfw row C/D switch installation & configuration - https://phabricator.wikimedia.org/T364095#9953516 (10cmooney) [11:27:21] 10netops, 06DC-Ops, 06Infrastructure-Foundations, 10ops-codfw, 06SRE: Get test host connected to codfw row c/d lsw's - https://phabricator.wikimedia.org/T367512#9953540 (10cmooney) All is working well on the test-host. Well puppet was giving me a headache but I just skipped all that :) Reimage works an... [11:27:32] 10netops, 06Infrastructure-Foundations, 06SRE, 13Patch-For-Review: No unicast IP ranges announced to peers from eqdfw - https://phabricator.wikimedia.org/T367439#9953535 (10cmooney) 05Open→03Resolved All seems good with the policy changes now, closing task. [13:23:22] Hey :) I'd feel more confident if someone from traffic could review https://gerrit.wikimedia.org/r/c/operations/puppet/+/1050293 and followups please [13:24:12] that looks like something for vgutierrez but happy to do it if he is not around or busy [13:24:26] * vgutierrez looking [13:24:31] ty <3 [13:24:32] <3 [13:30:49] thanks, I'll go ahead and disable puppet on P:trafficserver::backend before merging, then do a manual run on one to ensure it's a noop, then do a full run, sounds good? [13:31:25] yep [13:31:38] awesome ty [14:05:23] 06Traffic, 10MW-on-K8s, 06serviceops, 06SRE, and 2 others: Spin down api_appserver and appserver clusters - https://phabricator.wikimedia.org/T367949#9954050 (10jijiki) [14:05:38] 06Traffic, 10MW-on-K8s, 06serviceops, 06SRE, and 2 others: Spin down api_appserver and appserver clusters - https://phabricator.wikimedia.org/T367949#9954055 (10jijiki) [14:10:56] 06Traffic, 10MW-on-K8s, 06serviceops, 06SRE, and 2 others: Spin down api_appserver and appserver clusters - https://phabricator.wikimedia.org/T367949#9954061 (10Clement_Goubert) [14:16:17] 10Wikimedia-Apache-configuration, 06Security-Team, 13Patch-For-Review, 07SecTeam-Processed, 07Security: Remove docroot/wikimediafoundation.org/ folder from mediawiki-config - https://phabricator.wikimedia.org/T366005#9954097 (10Reedy) I had a quick look, but I can't obviously see if the file needs to sta... [14:31:18] 06Traffic, 10MW-on-K8s, 06serviceops, 06SRE, and 2 others: Spin down api_appserver and appserver clusters - https://phabricator.wikimedia.org/T367949#9954181 (10Clement_Goubert) [15:07:25] 06Traffic, 06SRE: Anycast ns1.wikimedia.org - https://phabricator.wikimedia.org/T366193#9954302 (10ayounsi) > Possible, but complicated and fuzzy as to the effects on different scenarios. If we "weight" a single anycast/24 by loading up several distinct NS IPs from it, it also has an outsized negative impact a... [15:31:02] 06Traffic, 10DNS, 10fundraising-tech-ops, 06SRE, 13Patch-For-Review: Cleanup unused DNS subdomains - https://phabricator.wikimedia.org/T367012#9954341 (10AKanji-WMF) Thanks all - confirmed with @RLewis that this should point to https://wikimediafoundation.org/support/benefactors/ [21:12:41] 10Wikimedia-Apache-configuration, 10Wikimedia-Site-requests, 13Patch-For-Review: missing project handler does not handle short-form URLs properly - https://phabricator.wikimedia.org/T355018#9955155 (10Pppery) a:03Pppery [21:25:17] 10netops, 06Infrastructure-Foundations, 06SRE, 13Patch-For-Review: Configure QoS marking and policy across network - https://phabricator.wikimedia.org/T339850#9955217 (10cmooney)