Page MenuHomePhabricator

I would like to be added to the wmf-deployers gerrit group
Closed, ResolvedPublic

Description

Hi there --

I have access to do deploys in prod, but I don't have access to the wmf-deployers group. This led to issues today when I wasn't able to merge and deploy the config change that fixed T200346.

Timo mentioned in #wikimedia-releng that there might be some other permissions that are needed. Here's what he said, I don't have any good way to evaluate whether there are other changes that are needed.

There's a fair bit more on-boarding for mw deploys than for other deploys, including (not sure if official or not) access to mwlog, mwmaint, (which have their own group I think), and ugroup wikidev / sudo mwdeploy (not sure how that is granted), and things like Logstash but afaik those are ldap/nda ldap/wmf all.

The Wikitech docs about getting this access just say "ask someone who has access", which seems a tad informal for what's a pretty powerful set of permissions, so I'm hoping that tagging RelEng will get it to the right place (or get it noticed by someone who knows what the right place is).

Event Timeline

Legoktm claimed this task.
Legoktm subscribed.

I added you to the group, all it does is give you +2 rights on wmf/ branches and ops/mw-config. Access to mwmaint/mwlog hosts is included in the deployment group.

And logstash comes with membership in the wmf ldap group, which you're in.