puppet onclouddb1003.clouddb-services.eqiad1.wikimedia.cloud fails like this:
Function lookup() did not find a value for the name 'profile::wmcs::services::postgres::osm_password'
There are four allied passwords in the manifest; probably all four of them were wiped by T254491
$osm_password = hiera('profile::wmcs::services::postgres::osm_password'),
$kolossos_password = hiera('profile::wmcs::services::postgres::kolossos_password'),
$aude_password = hiera('profile::wmcs::services::postgres::aude_password'),
$planemad_password = hiera('profile::wmcs::services::postgres::planemad_password'),I'm not clear on if anyone is currently using those passwords or if they can be rotated.