That's indeed something we might want to look at going forward. The only blocker I see right now is that most of the "production" cookbook that could make sense to move to a shared base would not currently work from the cloudcumin hosts, making the point a bit moot.

True, sre.hosts.reimage is not likely to work anytime soon. The only sre.* cookbooks that I think we can easily run from cloudcumin are the sre.wikireplicas.* ones. But the ownership of wikireplicas is currently being discussed, so let's wait to see what is the outcome of that discussion.

I also wonder if we should remove production cookbooks from cloudcumin hosts, and keep only wmcs-cookbooks in the cookbooks_repos list. This means running cookbook -l in cloudcumin hosts would no longer return the list of sre.* cookbooks that do not work there.

Regarding keeping only the wmcs cookbooks in the conifg that's ok for me if it's ok for the WMCS team. At least for now, so we don't generate the expectation that those should work.

Ok, I will create a patch!

Change 955937 had a related patch set uploaded (by FNegri; author: FNegri):

[operations/puppet@production] [cluster::cloud_management] Don't install prod cookbooks

https://gerrit.wikimedia.org/r/955937

Change 955937 merged by FNegri:

[operations/puppet@production] [cluster::cloud_management] Don't install prod cookbooks

https://gerrit.wikimedia.org/r/955937