The mediawiki maintenance host in codfw (wasat) is already running jessie, while at this point terbium in eqiad was running on trusty. Now that it's the active server, logrotate is failing like this:
/etc/cron.daily/logrotate: error: skipping "/var/log/mediawiki/cirrus-sanitize/push-jobs.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation. error: skipping "/var/log/mediawiki/cirrus-suggest/aawikibooks.codfw.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
This is due to new behaviour in the logrotate version in jessie, the same change also needed to be made for HHVM in T137689