Vopsbot doesn't have channel topic rights
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	RLazarus
	Feb 15 2023, 8:10 PM

Description

When Vopsbot (irc nick sirenbot) restarts, it rejoins its channels but doesn't automatically recover its privileges. In the private SRE channel, that's not a factor, because anyone can update the topic. But in #wikimedia-operations and #wikimedia-sre, mode +t is set, so only ops and half-ops can update the topic. The bot is not automatically opped, so its topic updates fail, and the topic contains incorrect information about who's on call.

We can probably fix this either by configuring chanserv, or via ircservserv, but I don't have the rights to do so.

Details

	Subject	Repo	Branch	Lines +/-
	alerting_host: Disable vopsbot in #wikimedia-sre	operations/puppet	production	+0 -1
	Move sirenbot to full op	wikimedia/irc/ircservserv-config	master	+2 -2

Customize query in gerrit

Related Objects

Mentioned In: rWISCa956a57608c4: Move sirenbot to full op

Event Timeline

RLazarus created this task.Feb 15 2023, 8:10 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFeb 15 2023, 8:10 PM

lmata subscribed.Feb 15 2023, 8:17 PM

Legoktm subscribed.Feb 15 2023, 9:46 PM

legoktm opened https://gitlab.wikimedia.org/repos/sre/vopsbot/-/merge_requests/10

Use ChanServ to the change the topic to avoid needing to be opped

gerritbot added a project: Patch-For-Review.Feb 15 2023, 9:46 PM

We can set the bot to be auto-opped (+O) if that's desired, but the general guidance is to be opped only when necessary (https://libera.chat/guides/catalyst#only-be-opped-up-when-necessary - really for humans but in practice we like bots to follow it too), which is why ircservserv has this complicated routine to op itself, do its business, and then de-op.

But chanserv has a command to change the topic without being opped, which the above MR uses. On that note, does the private SRE channel even have chanserv? I know _security doesn't.

In T329791#8620308, @Legoktm wrote:

On that note, does the private SRE channel even have chanserv? I know _security doesn't.

If its registered in ChanServ it does, There is a secondary option to have the "user/service" sit in the channel (cs set guard), but you can still use all features if its not.