[09:34:25] !log tools delete tools-worker-1001, it was totally malfunctioning [09:34:28] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [10:12:56] !log tools re-create the tools-worker-1001 VM, already enrolled into toolforge k8s [10:12:58] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [10:13:36] !log tools enroll the tools-worker-1029 VM into toolforge k8s, but leave it cordoned for sssd testing purposes (T221225) [10:13:38] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [10:13:38] T221225: sssd integration needs to be updated to include sudo config from LDAP support - https://phabricator.wikimedia.org/T221225 [11:13:23] !log tools briefly tested some sssd config changes in tools-sgebastion-09 [11:13:25] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [12:01:13] FYI there seem to be some NFS problems (see also #wikimedia-operations) [12:16:23] Agree! ls -l says nothing more that "ls: cannot open directory '.': Stale file handle" [14:00:56] Technical Advice IRC meeting starting in 60 minutes in channel #wikimedia-tech, hosts: @awight & @tgr - all questions welcome, more infos: https://www.mediawiki.org/wiki/Technical_Advice_IRC_Meeting [14:50:55] Technical Advice IRC meeting starting in 10 minutes in channel #wikimedia-tech, hosts: @awight & @tgr - all questions welcome, more infos: https://www.mediawiki.org/wiki/Technical_Advice_IRC_Meeting [15:28:48] bd808: if a user creates an account via striker does that account just already exist on wikitech or is there some process or other to tell wikitech to know about the already-in-ldap account? [15:29:48] andrewbogott: It will show up in wikitech the first time the user logs in there *or* after I run a maintenance script to attach the LDAP account locally [15:30:20] ok, but from a user's standpoint they can just log right into wikitech with striker creds and it'll just work? [15:30:36] yes [15:30:39] cool, thanks [15:30:50] from the user's perspective it's a simple login using their existing LDAP credentials [15:30:56] (If everything works correctly (TM)) [15:31:00] in reality it's user creation on wikitech [15:31:33] same goes for SVN import accounts IIRC [15:32:03] I thought svn support was dropped? [17:12:24] jeh: did the wikitech login ever work for you? [17:13:16] bd808: unfortunately no. It was working yesterday, but no luck today. [17:14:50] bd808: well, I take that back. Looks like I was able to login just now :) [17:16:20] magic! [17:16:54] I wonder if the issues with the OpenStack APIs are in any way related? [17:17:47] which issues with the APIs? [17:18:18] cloudcontrol moving stuff? [17:18:25] Krenair: yeah. that [17:18:32] can't think how it would fully break wikitech login [17:19:03] I know wikitech will try to get a keystone token but I think it will normally fail gracefully? [17:19:22] I think we've cut most of the OpenStackManager stuff out of the auth loop, but I'd have to go re-read the code to be sure [17:19:37] * bd808 shrugs [18:05:48] If they are related, that would imply cloudcontrol1003 is hardcoded somewhere in that mess. This would not surprise me. [18:07:42] bstorm_ https://github.com/wikimedia/operations-mediawiki-config/search?q=cloudcontrol1003&unscoped_q=cloudcontrol1003 [18:11:01] Oh lookie there [18:11:11] There's a lot of those [18:15:22] :-/ [18:16:36] T223902 <-- soon! [18:16:36] T223902: cloudcontrol: decide on FQDN for service endpoints - https://phabricator.wikimedia.org/T223902 [18:45:56] :)