From ores-web-04.ores.eqiad.wmflabs:/var/log/puppet.log,
```
Error: Could not find user deploy-service
Error: /Stage[main]/Ores::Web/Ores::Config[main]/File[/etc/ores/99-main.yaml]/owner: change from root to deploy-service failed: Could not find user
deploy-service
Error: Could not find group deploy-service
Error: /Stage[main]/Ores::Web/Ores::Config[main]/File[/etc/ores/99-main.yaml]/group: change from root to deploy-service failed: Could not find group
deploy-service
```
This is probably the wrong approach, but should fix the problem on both labs and production. My reasoning is that we deploy configuration with puppet and not scap, so the permissions don't need to allow deploy-user to write.
https://gerrit.wikimedia.org/r/#/c/362097/
~~The strange thing is that web-03 does have a deploy-service user, and doesn't experience this error. web-04 doesn't have the user. Maybe the user was an artifact left behind by previous versions of the puppet config?~~