@Viztor: Please see https://phabricator.wikimedia.org/project/profile/956/ which links to https://wikitech.wikimedia.org/wiki/Production_shell_access which lists requirements (bullet point 2.2). :)
Also, do you need such access on a regular and ongoing basis?
Yes, I've set up relevant config.
I probably don't need to use it that often as I'm just a volunteer here, but it would nice have access to puppet as tasks require, which seems to be often(?).
ah, you mean 22.214.171.124. I must've missed it.
the public key for wm production is: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB8sMjL2a5Ziz+FJELnjN/+2ddM3fW6E2K5ZgHKPzcny firstname.lastname@example.org
see Updating operations/puppet section, it seems one must be able to access puppetmaster before any change in puppet can be deployed. It appears that I will need access to puppetmaster1001 or puppetmaster2001
We talked on IRC about this and agreed this ticket should be re-purposed away from "production access to puppetmaster" and to "add to trusted users for CI in gerrit" and possibly "add to 'puppet' or another project in wmcs to run local puppetmaster'.
Hi @Viztor — would be happy to approve a patchset to add you to our CI allowlist. If you follow the steps on https://www.mediawiki.org/wiki/Continuous_integration/Allow_list I can approve. Thanks!