To publish documentation to doc.wikimedia.org, we have the Jenkins job rsync the doc to an intermediate instance in the project (integration-publisher [10.68.16.255). This is done over rsync/ssh and is described at https://www.mediawiki.org/wiki/Continuous_integration/Documentation_generation .

The security rules for the labs project "integration" are messed up (investigation at T88995). Traffic between instances is forbidden by default and a workaround is to explicitly define rules ( T88960 ). We can't explicitly define a security rule since that will allow ssh from any labs instance and we want to explicitly restrict it to instance in the integration project.

Impact: all Jenkins jobs publishing to doc.wikimedia.org are broken and report failures to Gerrit.