[10:46:07] !log tools added logster_0.0.10-2~jessie1_all.deb to buster-tools and buster-toolsbeta (aptly) for T235059 [10:46:10] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [10:46:10] T235059: Toolforge: refresh puppet code for proxy (dynamicproxy) to support Debian Buster - https://phabricator.wikimedia.org/T235059 [10:51:38] !log tools added docker-engine_1.12.6-0~debian-jessie_amd64.deb to buster-tools and buster-toolsbeta (aptly) for T235059 [10:51:41] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [10:51:41] T235059: Toolforge: refresh puppet code for proxy (dynamicproxy) to support Debian Buster - https://phabricator.wikimedia.org/T235059 [10:53:07] !log tools added kubernetes-node_1.4.6-7_amd64.deb to buster-tools and buster-toolsbeta (aptly) for T235059 [10:53:09] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [10:56:46] Hi. Is bstorm_ around? [10:57:04] hauskater: no, it is the middle of the night for her [10:57:24] arturo: ah, okay. I'll ping her on mediawiki then for when she wakes up [10:57:35] its re a repository creation request from her [10:57:55] hauskater: maybe I can help [10:58:03] for which repo? [10:58:37] she requested a new repo called ingress-admission-controller [10:58:54] arturo: al final de https://www.mediawiki.org/wiki/Gerrit/New_repositories/Requests [10:59:13] I can create the repo [10:59:31] but it won't be toolforge/tools/.* but labs/tools/.* [11:00:12] we would really like to have the new project scheme [11:00:15] can it be created? [11:00:56] I can create projects but I don't really want to deviate from the already-existing schema as it's used to inherit permissions, etc. [11:01:27] We should rename them all at some point but that's for RelEng [11:01:56] So if it's okay for labs/tools/ingress-admission-controller.git I can do it now [11:02:18] renaming would be really painful I guess, even with a redirection in place [11:02:40] would it be possible to create the repo under toolforge/* and make toollabs-trusted the owning group? [11:02:51] would that solve the permissions issues? [11:03:41] there's no toolforge/.* superproject, it'd be rather weird. It's technically possible but if you really want it the new way I'd deferr the creation to somebody else with "leave" to do "new" things [11:04:32] cfr. https://gerrit.wikimedia.org/r/#/admin/projects/?filter=toolforge [11:04:46] vs. https://gerrit.wikimedia.org/r/#/admin/projects/?filter=labs [11:05:15] the labs keyword should really go away sooner than later [11:05:35] and so the labs,tools,toollabs combos [11:06:10] I understand, but that's not in my hands :) [11:06:38] I don't like creating a repo and then renaming it [11:06:47] so I wonder what it takes to introduce the new namespace [11:55:48] !log tools create tools-test-proxy-01 VM for testing T235059 and a puppet prefix for it [11:55:52] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [11:55:52] T235059: Toolforge: refresh puppet code for proxy (dynamicproxy) to support Debian Buster - https://phabricator.wikimedia.org/T235059 [13:01:13] Does anyone have a sec to help out with Security Group/Web proxy settings for a Cloud VPS project? [13:03:13] Lokal_Profil: I do! [13:16:42] !log git apt update and apt full-upgrade ran on all *.git.wmflabs instances [13:16:44] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Git/SAL [13:51:41] !help still can't get the security group/web proxy to work for finding-glams on Cloud VPS [13:51:41] Lokal_Profil: If you don't get a response in 15-30 minutes, please create a phabricator task -- https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=wmcs-team [13:57:53] Lokal_Profil: did art.uro help you before? I don't see any context for 'still' [13:59:41] andrewbogott yes arturo gave me some assistance before. Solved some things and made me investigate an issue in the backend which has since been fixed. End result is still a 504 though [14:00:28] so you must be using a web proxy? [14:01:51] Set up a webproxy at finding-glams.wmflabs.org with http://172.16.0.212:3000 as the backend. [14:02:22] Made a security group opening up port 3000 to 10.0.0.0/8 [14:03:10] Service (nuxt.js) says it's listening on http://172.16.0.212:3000/ [14:03:36] what VM is 172.16.0.212? [14:03:53] the only instance in the project [14:04:06] finding-glams-monumental [14:05:06] do you mind if I add myself to the project so I can look at the security groups? [14:05:19] Please go ahead =) [14:07:04] ok, here's what's missing: You created a special security group 'web-server' for web servers, which is good! [14:07:14] But that group is not applied to your VM, which is bad [14:07:42] you can add it by going to the 'instances' page and selecting 'edit security groups' in the row associated with the VM [14:07:55] *facepalm* [14:08:26] it's not especially obvious :) [14:08:56] but it was the last line of the instruction page which I must have read a bunch of times =) [14:10:20] did that fix it? [14:10:56] Seems to still give me a 504 [14:20:10] hm [14:20:40] oh dang [14:20:47] sorry, the docs must be out of date, can you link me to them? [14:20:58] 10.0.0.0/8 is no longer especially useful since the cloud isn't under 10. anymore [14:21:13] https://wikitech.wikimedia.org/wiki/Help:Proxy [14:21:16] you want 172.16.0.0/21 [14:21:24] i'll change the docs while you change your rule :) [14:22:03] Yay [14:22:43] hey, now the proxy can reach your service! [14:22:53] Many thanks =) [14:23:05] sure thing! Sorry about the trap in the docs [14:25:36] No worries [14:39:11] andrewbogott: gotta love documentation, always outdated, and always usually wrong lol [17:24:45] bstorm_: hi [17:24:53] Hello :) [17:25:06] Did you get my message on your user page? [17:25:13] bstorm_: I marked your git repo as withdrawn [17:25:19] Yes, that's why I'm here [17:25:20] Ok great [17:25:43] I created a phab task for the whole mess and will see if I can get things through the right channels [17:25:50] Much appreciated [17:25:53] So, I can create it under toolforge/.* but that's a wholy new schema and our instructions says not to deviate w/o consensus [17:25:59] Yeah [17:26:14] No worries [17:26:17] and I'd prefer people not to start shouting at me [17:26:25] Definite 😁 [17:26:30] *definitely [17:26:40] I certainly am not looking to cause trouble for anyone [17:27:47] It looks paladox is creating a cloud/.* stuff [17:28:02] You can yell at him all you want :P [17:28:42] heh, i was speaking to them hauskater before i created it :) [17:29:03] paladox: okay :D [17:29:12] so the new schema would be cloud/.* ? [17:29:22] even for tools? [17:29:40] I suggest you speak to qchris as well since he creates most of the repos [17:30:01] * hauskater wishes the rename-project plugin existed [17:30:10] s/existed/could be installed [17:30:36] !log tools.wikibugs Updated channels.yaml to: f51498e134a76fe72b944e1db7c5f6f38dd16f44 Update tags for #mediawiki-i18n [17:30:38] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.wikibugs/SAL [18:07:52] :) [18:24:41] !log wikidata-dev wikidata-shex deleted instance (T234313) [18:24:45] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Wikidata-dev/SAL [18:24:45] T234313: Delete wikidata-shex test system - https://phabricator.wikimedia.org/T234313 [18:28:37] hauskater: The Labs / Toolforge rename did not sit too well with Gerrit's hierarchy. Agreed. [18:28:51] bstorm_: Could you help me find the phab task you mentioned? [18:28:59] qchris: Yup, I thought so too, so I decided to ask first. [18:28:59] (I tried, but my Phab searchfoo is weak) [18:29:22] 235279 I think [18:29:25] T235279 [18:29:31] T235279: Create a new repository for kubernetes tool under a new directory in gerrit that doesn't exist yet - https://phabricator.wikimedia.org/T235279 [18:29:40] Thanks! [18:30:21] qchris: fwiw the 'Create Project' UI at gerrit looks to be working again, but I didn't modified the docs over mw.org because we know for sure the ssh thing does work [18:30:49] I haven't used the UI for that since ages :-) [18:30:56] UIs are so tricky to script against. [18:32:37] Looks like paladox already created 'cloud' and hashar is fine with it. So that seems the way to go. [18:33:08] qchris: lucky you have things scripted. I do everything by hand :| [18:33:14] gerrit, phab and github [18:33:14] Huh? [18:33:18] total pain [18:33:43] I don't have phab scripted either. Phab is ... well :-/ [18:33:50] * hauskater heading to cook dinner [18:33:51] yeah [18:33:58] phab is such... PHun [18:34:00] Enjoy your dinner! [18:34:03] pun intended [18:34:09] Hahaha :) [18:34:28] heh [18:37:16] I've used the UI recently and after we fixed a puppet file it is assigning ownership to Gerrit Managers so I can edit the project afterwards, etc. [18:37:29] I'm using both methods atm [18:37:37] Like I said, kitchen time [18:37:43] If you see smoke, it's not me [18:37:48] I'm an outstanding chef [18:37:49] lol [19:52:38] !log tools restarted docker on tools-docker-builder after phamhi noticed the daemon had a routing issue (blank iptables) [19:52:41] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [21:16:30] !log openstack grant tools-dns-manager designateadmin role in tools project T235304 [21:16:33] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Openstack/SAL [21:16:33] T235304: Create a service account to manage toolforge.org. from acme-chief - https://phabricator.wikimedia.org/T235304 [21:52:32] !log openstack create toolforge.org DNS zone in tools project T234617 [21:52:35] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Openstack/SAL [21:52:36] T234617: Toolforge. introduce new domain toolforge.org - https://phabricator.wikimedia.org/T234617