Hi @Jdforrester-WMF: I am the SRE on clinic duty and happy to fulfill this request. Some notes before we can start processing this:

1. @CCoxwell-WMF and @gengh: please note that you do not currently have shell access and will need to file separate tickets for that with the relevant information on the template. To speed up the process, please complete all the steps and get the managerial approval on the task.

2. Further, @thcipriani this requires your approval.

I will add the other members in the meantime.

Change 931675 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/puppet@production] admin: update membership for deployment and deploy-service

https://gerrit.wikimedia.org/r/931675

deployment includes deploy-service rights, so granting both is not necessary.

In T339936#8950370, @ssingh wrote:

2. Further, @thcipriani this requires your approval.

Approved for deployment—you'll need to be in that group to access kubeconfig files.

@Jdforrester-WMF do you need deploy-service, too? My puppet grepping fails me here.

In T339936#8951911, @taavi wrote:

deployment includes deploy-service rights, so granting both is not necessary.

Hmm, is that new? I certainly had deployment when I was granted deploy-service, so I assume it was needed at the time.

In T339936#8957242, @thcipriani wrote:

In T339936#8950370, @ssingh wrote:

2. Further, @thcipriani this requires your approval.

Approved for deployment—you'll need to be in that group to access kubeconfig files.

Thanks!

@Jdforrester-WMF do you need deploy-service, too? My puppet grepping fails me here.

Maybe not? Happy to just go with deployment if that's all that needed nowadays.

In T339936#8957331, @Jdforrester-WMF wrote:

In T339936#8951911, @taavi wrote:

deployment includes deploy-service rights, so granting both is not necessary.

Hmm, is that new? I certainly had deployment when I was granted deploy-service, so I assume it was needed at the time.

Looks like it changed in 2017. https://gerrit.wikimedia.org/r/plugins/gitiles/operations/puppet/+/33c634b3c4166f5d23cc68d98a8130e98459286e%5E%21/hieradata/role/common/deployment_server.yaml

Change 931675 merged by Ssingh:

[operations/puppet@production] admin: update membership for deployment group

https://gerrit.wikimedia.org/r/931675

In T339936#8951911, @taavi wrote:

deployment includes deploy-service rights, so granting both is not necessary.

Thanks, updated to use only deployment.

Have also added all to https://gerrit.wikimedia.org/r/admin/groups/wmf-deployment,members (except for Carrie yet).

Access for Geno should work now. Feel free to try it out and let us know.

@Jdforrester-WMF This should be resolved:)

In T339936#8982927, @Dzahn wrote:

@Jdforrester-WMF This should be resolved:)

Thank you!