Plan:

1. Take @JAllemandou diff for httpd_cas modularisation and finish it. For test, applying it and compare with functional deployment.
2. Adapt httpd_cas for eventstreams chart and deploy next version of chart.

To-Do:

1. Land the connector diff, consensus is that the change won't affect anything,
2. Add the password to the connection based on @EBernhardson info,
3. Test if there any other code needed to get write.

opensearch-ttmserver-test is up, now need to figure out how to migrate indices

Trying to roll-out opensearch-ttmserver-test

I manually cleaned up /var/cache/archiva more than wanted, so I can't test the cleaning script/behaviour., will check in a week.

Added secrets with the dirtiest script.

applying admin_ng for dse-k8s-*

Thanks

Could you please add me to the team? I don't have an access to change the SRE rotation.

Marked as resolved as it seems to work.

Thanks for reporing back, marked as resolved then.

Lemme see what I can do

Transferred

@gmodena I started a transfer, but you might not have the access for it (at least to remove). Do you want me to chown it to any specific user (qlever maybe)

Merged, principal created.

atsuko@krb1002:~$ sudo manage_principals.py create daniel --email=dkinzler@wikimedia.org

Rolled out the replacement script, thanos helmfile_admin_ng_pending_changes didn't change. Going to roll it out for dse services as well now.

Code and history is copied to gitlab/sre/charlie, now there are two commands:

merged, will roll-out within an hour on periodic puppet run

For all purposes, running charlie --dry_run --services_dir admin_ng diff produces the same information as check_admin_ng_pending_changes.py when invoked for all environments. I'm considering

Wrapping my head around @RLazarus [charlie.py](https://gerrit.wikimedia.org/g/operations/puppet/+/refs/changes/80/1240780/2/modules/profile/files/kubernetes/deployment_server/charlie.py), as it is "recursively searches out helmfile services in a given repository or subtree, identifies all the environments for each service, and diffs or applies them by shelling out to helmfile". It seems like the helmfile discovery is solved here, and it runs periodically, so it would be useful to make it generate metrics.

Hi @MMiller_WMF, can you please approve the access to restricted HDFS for Justin Moore?

Recorded a demo, gonna present on DPE meetings this and next week

• un-narrated video

I joined the DPE SRE 3 weeks ago, and if I remember correctly, @Gehel said that the team marked a few tasks like this so I can start with those.

To update:

• search-platform/cirrus-streaming-updater/.pipeline/blubber.yaml

Update https://wikitech.wikimedia.org/wiki/Data_Platform/Systems/Airflow/Developer_guide
Fix a quirk here

Successfully published image docker-registry.discovery.wmnet/flink:1.20.3-wmf1-20260416

@Ottomata shall we move this step to the base package, since the source file is in the base package as well?

copies:
  - from: docker-registry.wikimedia.org/flink:1.20.3-wmf1-20260416
    source: /opt/flink/opt/flink-s3-fs-presto-1.20.3.jar
    destination: /usr/local/lib/python3.11/dist-packages/pyflink/plugins/s3-fs-presto/flink-s3-fs-presto-1.20.3.jar

Test plan now contains correct invocations for both builds.

Looking at docker-pkg

Todo:

1. Update docs in README and on wikitech
2. Release deb
3. Announce and demo