[08:38:46] <taavi>	 !log clouddb-services delete clouddb-wikilabels-01,02 T307389
[08:38:48] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Clouddb-services/SAL
[08:38:48] <stashbot>	 T307389: Upgrade wikilabels databases to buster/bullseye - https://phabricator.wikimedia.org/T307389
[08:49:32] <awight>	 I'm trying to provision a new deployment-prep box--will this error heal itself?
[08:49:38] <awight>	 > Error: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=error: certificate verify failed (self signed certificate in certificate chain): [self signed certificate in certificate chain for /CN=Puppet CA: deployment-puppetmaster03.deployment-prep.eqiad.wmflabs]
[08:49:48] <awight>	 (new bullseye box)
[08:55:22] <taavi>	 awight: no, new instances need manual steps to set up the standalone puppetmaster, https://wikitech.wikimedia.org/wiki/Help:Standalone_puppetmaster
[08:58:52] <awight>	 taavi: Thanks, that makes sense that deployment-prep has its own puppetmaster.  It also answers my next question of how I can add secrets to the private repo hosted there...
[10:36:24] <Krinkle>	 awight: might be of use: https://wikitech.wikimedia.org/wiki/Performance/Runbook/Puppet_patches
[11:02:29] <btullis>	 Quick question. I've added steve_munene (our new SRE in the data engineering team) to the analytics  and data_engineering projects in horizon. Do I also need to add him manually to the bastion project, before he has access? Thanks.
[11:05:56] <taavi>	 btullis: no, bastion project membership is managed automatically
[11:06:23] <btullis>	 taavi: Many thanks.
[11:17:48] <taavi>	 !log admin backfilling security groups for metricsinfra access on all projects T288108
[11:17:52] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL
[11:17:52] <stashbot>	 T288108: Figure out how to deal with security groups when rolling out metricsinfra scraping - https://phabricator.wikimedia.org/T288108