I checked grants on all mariadb::backup_source s (db[2097-2101,2139,2141].codfw.wmnet,db[1102,1116,1139-1140,1145,1150,1171].eqiad.wmnet) at the same time I did a rolling upgrade/restart. I think I kept them all in sync with production (as much as I cook, s6, s7 and x1 have some custom ones), but I removed the wikiadmin@localhost grants when I found it, as I copied the grants from the model I was told to follow. FYI

Mentioned in SAL (#wikimedia-operations) [2021-11-30T09:06:48Z] <Amir1> dropping wikiadmin@localhost from all pooled replicas of s6 (T296511)

I've dropped it from all pooled replicas of s6, I will continue to the rest of wiki next week.

Master included?

In T296511#7536619, @Marostegui wrote:

Master included?

Nope, let me do that.

Done.

Mentioned in SAL (#wikimedia-operations) [2021-12-06T11:21:46Z] <Amir1> dropping wikiadmin@localhost from all of s2 (T296511)

Mentioned in SAL (#wikimedia-operations) [2021-12-06T11:28:16Z] <Amir1> dropping wikiadmin@localhost from all of s3 (T296511)