In T229894#5395122, @Aklapper wrote:

@Viztor: Please see https://phabricator.wikimedia.org/project/profile/956/ which links to https://wikitech.wikimedia.org/wiki/Production_shell_access which lists requirements (bullet point 2.2). :)

Also, do you need such access on a regular and ongoing basis?

Yes, I've set up relevant config.

I probably don't need to use it that often as I'm just a volunteer here, but it would nice have access to puppet as tasks require, which seems to be often(?).

In T229894#5395772, @Aklapper wrote:

@Viztor: Please see https://wikitech.wikimedia.org/wiki/Production_shell_access section 2.2 for missing information here, and then provide missing information here.

ah, you mean 1.2.2.2. I must've missed it.

the public key for wm production is: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB8sMjL2a5Ziz+FJELnjN/+2ddM3fW6E2K5ZgHKPzcny viztor@tools.wmflabs.org

Thanks. It's still unclear to me which specific server you need access to and especially why, but SRE can judge that better...

In T229894#5396816, @Aklapper wrote:

Thanks. It's still unclear to me which specific server you need access to and especially why, but SRE can judge that better...

see Updating operations/puppet section, it seems one must be able to access puppetmaster before any change in puppet can be deployed. It appears that I will need access to puppetmaster1001 or puppetmaster2001

Hi @Viztor is the reason for requesting this just that you want a change deployed for T226633? (It seems we need to improve on how to get fonts installed T228591)

In T229894#5398158, @Dzahn wrote:

Hi @Viztor is the reason for requesting this just that you want a change deployed for T226633? (It seems we need to improve on how to get fonts installed T228591)

I'm not sure if there is any, but past examples could be helpful too.

We talked on IRC about this and agreed this ticket should be re-purposed away from "production access to puppetmaster" and to "add to trusted users for CI in gerrit" and possibly "add to 'puppet' or another project in wmcs to run local puppetmaster'.

In T229894#5398333, @Dzahn wrote:

We talked on IRC about this and agreed this ticket should be re-purposed away from "production access to puppetmaster" and to "add to trusted users for CI in gerrit" and possibly "add to 'puppet' or another project in wmcs to run local puppetmaster'.

editing task accordingly.

Hi @Viztor — would be happy to approve a patchset to add you to our CI allowlist. If you follow the steps on https://www.mediawiki.org/wiki/Continuous_integration/Allow_list I can approve. Thanks!