• nagios-scl3
    New Sysadmin OnDuty is jlaz
  • jgmize
    heads up: developer.mozilla.org no longer responds to ICMP now that we've moved it to kubernetes on AWS.
  • jgmize
    There may be some monitoring scripts that need to be updated to use https instead of icmp
  • jlaz
    jgmize: understood
  • jgmize
    Thanks jlaz
  • nagios-scl3
    New Sysadmin OnDuty is daveio
  • bastien
    daveio: I am about to release a new version of mozilla-releng/services (*.mozilla-releng.net). Any alerts coming up soon will be best directed to me. I'll let you know when it's all done. Thank you!
  • daveio
    bastien: we just had an alert about dxr being unreachable, is that related?
  • bastien
    daveio: no, this service is not managed by mozilla-releng/services
  • daveio
    ack, thanks
  • Aryx
    daveio: hi, is the dxr issue tracked anywhere?
  • daveio
    Aryx: I've opened bugzilla.mozilla.org/1407592 for it
  • firebot
    Bug 1407592 is not accessible
  • Aryx
    thank you
  • bastien
    daveio: the mozilla-releng/services release is now done. I'll stay in #shipit with garbas to watch over eventual errors. Thanks !
  • daveio
    great, ty
  • whimboo
    davihello
  • whimboo
    daveio: do we have anyone around who could have a look at bug 1393985?
  • firebot
    Bug bugzil.la/1393985 is not accessible
  • whimboo
    since the renewal of the certificate we have a permafailure of at least one security test because there is no subjectName available anymore
  • daveio
    looking
  • daveio
    whimboo: the cert looks good to me, it's got an accurate CN and SANs, strikes me that's more a test issue than a cert issue?
  • whimboo
    daveio: the tests rely on data from subjectName. I don't see this at all when checking the certificate detials
  • daveio
    whimboo: can you link me to a cert that is passing these tests?
  • daveio
    pm if sensitive, this is a public channel
  • whimboo
    daveio: so formerly we also had postal code and stree. Both are missing
  • whimboo
    daveio: the old cert is no longer active somewhere
  • daveio
    any cert
  • whimboo
    it got replaced without letting us test the changes first
  • daveio
    just one that passes the tests you're referring to
  • whimboo
    it's a unit test and we only run it against that domain atm
  • whimboo
    so i think there is no way to revert the info in the cert anymore, and a test update is necessary
  • whimboo
    in the future it would be great if certificate data will be strongly kept the same for renewals
  • whimboo
    to not cause problems across all of our branches
  • daveio
    if you can fill that information into the bug so webops know, as they're the ones who handle the renewal
  • daveio
    but it may be that's just digicert's new fieldset for EV certs now
  • dustin
    just got a 504 from mozillians API
  • dustin
    at about xx:24:55
  • daveio
    dustin: just the one?
  • dustin
    I think so, yes
  • dustin
    over the last few days these have lasted for several minutes
  • dustin
    maybe this one is shorter
  • whimboo
    daveio: yes, did it. So lets see what they will say
  • dustin
    well, I should say, that was 5 errors in a row (we retry 5 times)
  • daveio
    you say you've been seeing this for multiple days now, is there a bug open for it?
  • dustin
  • firebot
    Bug 1404607 — FIXED, nobody⊙mozilla.org — Mozillians returning non-JSON response
  • dustin
    I guess I need to re-open that
  • dustin
    done
  • daveio
    dustin: perfect, thanks
  • nagios-scl3
    New Sysadmin OnDuty is sal
  • jdirx
    Hello sal
  • sal
    jdirx: yo
  • jdirx
    Got a question - have a customer that works on CloudOps/AWS and needs assistance with the Duo authentication for that. They were able to get their login.mozilla.com re-added to their new phone, but who handles the other portion?
  • sal
    vinh: you think this something that’s handled with ldap admin?
  • jdirx
    additional info - they had access before. Their previous phone was damaged. I verified they are working on the service desk side.
  • vinh
    I'll pm you jdirx
  • jdirx
    vinh: Ok
  • oremj
    jdirx: ckolos usually handles it for cloudops stuff
  • jdirx
    oremj: Thanks
  • jdirx
    vinh++
  • jdirx
    ckolos++
  • sarnold
    sal: #rust has a steady stream of join / part messages from user lucian -!- lucian [lucian⊙moz-iuo.htl.74.194.IP] has joined #rust -- are there any tools you can deploy to suggest lucian fix his or her network? :)
  • » sal looks
  • jlaz
    alm++