Hi @raja_wmde, you have been added to the NDA LDAP group.

@greg could you please review/approve this request for deployment permissions?

DNS records were added Monday at approx. 10:30am Eastern.

Hey @hashar, zuul_2.5.1-wmf10 has been uploaded for jessie-wikimedia:

Patch has been merged, and also double checked that offboard-user is a NOOP. I think we're good here, but please re-open if any follow-up is needed.

Hi @raja_wmde could you please coordinate obtaining a comment of manager approval on this task? Thanks!

ldap user mmarble appears to have already been removed from wmf.

Aliases have been added, dns records are live, and test mail to myself works. Please see https://phabricator.wikimedia.org/T231387#5488828 for currently open follow-up questions.

Hi Martin, this access is in place now. If any follow up is needed please don't hesitate to re-open. Thanks!

Uploaded a patch for this. But need approval from @Nuria before moving forward with it.

Uploaded a patch for this. Once we have approval documented we should be able to move forward with it.

@Ottomata excellent thx for the heads up!

https://opendistro.github.io/for-elasticsearch/ appears to be a valid option, although this was resolved I'll update the description to include it

Open Distro for Elasticsearch looks quite promising https://opendistro.github.io/for-elasticsearch/

Thanks for this feedback @Joe it's quite helpful! Sorry to bottom quote so much!

@mark you bet! I've uploaded a few patches to get mail flowing for this subdomain.

The eventgate-main config now includes the new brokers in the broker list.

Not sure what caused the system to be in this state, but after the following steps logstash is back up and running.

Since check systemd is a secondary monitor (important services are monitored via dedicated service specific checks) I think we can reduce the severity of the generic systemd alerts to warning and have them display in the icinga UI, without alerting on IRC.

In T225005#5414291, @herron wrote:

In T225005#5414274, @elukey wrote:

Andrew is on holidays, but it looks good to me!

Ok! Will plan to migrate kafka1001 -> kafka-main1001 tomorrow morning Eastern time

In T225005#5414274, @elukey wrote:

Andrew is on holidays, but it looks good to me!

In T225005#5406176, @herron wrote:

In T225005#5396148, @Ottomata wrote:

In addition to the steps in https://phabricator.wikimedia.org/T225005#5292211, we need to change update the list of Kafka brokers for eventgate-main in eqiad.

Sounds good. How do the steps and ordering look in https://docs.google.com/document/d/1o7bl1WBzSMymsXGzhWLy1GmMOSo_Evof1PHk2aQXAiE ? And what is the process to deploy the new eventgate-main config?

In T225005#5396148, @Ottomata wrote:

In addition to the steps in https://phabricator.wikimedia.org/T225005#5292211, we need to change update the list of Kafka brokers for eventgate-main in eqiad.

I've drafted a prometheus-ipsec-exporter package based on https://github.com/dennisstritzke/ipsec_exporter on boron.

List has been closed!

Hey @RobH, Cross-validate accounts started sending notifications for:

@sguebo_WMF (LDAP username sguebo) has been added to the wmf ldap group

Hi David, the requested access has been provisioned. I'll transition this to resolved now as a soft close. Please don't hesitate to re-open if any follow-up is needed. Thanks!

In T227496#5363988, @MoritzMuehlenhoff wrote:

staff members need to be a member of cn=wmf, cn=nda is for people who have access to PII-relevant data, but are not staff members

Hey David, sorry for the confusion. T227200 should be sufficient for both shell access and group membership. So I'll merge these tasks, and move forward with the patch uploaded referencing T227200.

Looping in @Nuria for analytics review/approval

Great! Thanks all

@Joe @Dzahn adding you both to gerritadmin would satisfy "at least 1 person from US TZs and 1 from EU TZs"

Thanks @Aklapper! The link on the sidebar of observability solves this quite nicely.

I wasn't able to find an ldap account with shell username Deb_Zierten, but I do see shell username dz1 associated with Deb's wikitech account and wmf email address.

In T228673#5354596, @Aklapper wrote:

Is this somehow related to https://phabricator.wikimedia.org/project/profile/84/ ? If yes, in which relation are they (subproject maybe?) and why is the observability workboard (e.g. combining some observability tasks with a Goal tag and then filtering the workboard view on that) not sufficient?

I'm not having luck reproducing this with my own non-wikimedia.org personal email account.

@greg sure, I'm back today from being out of the office last week, and will try to reproduce this and trace the emails to see whats happening.