[06:36:20] !log wikisp Maintenance on Mars [06:36:23] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Wikisp/SAL [07:08:59] has anyone deployed trove on openstack? [08:44:59] when you say 'deploy trove on openstack' do you mean 'use trove on cloud-vps'? Or are you talking about a totally different cloud deployment? [08:45:06] oops, they're gone [10:06:28] !log tools.stewardbots Restarted StewardBot and SULWatcher stucked on IRC [10:06:31] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stewardbots/SAL [20:40:46] !log puppet-diffs adding user denisse to have access to be able to upload puppet compiler facts [20:40:49] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Puppet-diffs/SAL [20:46:41] in the project "puppet-diffs" (puppet compiler), same SRE have "user, reader" and others have "member, reader" and others have "member, projectadmin, user, reader". Is "member" new and "user" old ? [20:47:39] which one makes the most sense for "needs to be able to ssh to instances and run sudo systemctl start.." without "needs to create new instances and fix puppet on them" [20:48:08] used "member, reader" [20:48:40] that is because after adding a user they are just "reader" and then I did "grant member" [20:55:32] mutante: https://lists.wikimedia.org/hyperkitty/list/cloud-announce@lists.wikimedia.org/thread/4IBVRKZNKV7AH5PZ5TWZ4QCOZMH3H4KZ/, tl;dr is that "projectadmin" is now "member" and "user" is now "reader" [20:55:59] so you need 'reader' to ssh to instances, and 'member' to create instances and similar via horizon [20:56:50] /me agrees with Andrew that the old names were clearer [20:57:06] (but not arguing against the change ^^) [21:11:44] taavi: thanks! and there is no difference between "ssh to instance" and "ssh to instances and have root", right? [21:12:47] I don't want to argue which name is clearer but I might argue that the fact that we have this mix of old and new.. the old ones did not go away might be the confusing part [21:13:38] mutante: not by default, although you can customize sudo policies via horizon [21:13:48] it probably wasn't easy to remove those at the sametime, so no complaints. thanks! [21:13:59] taavi: alright, yea, thanks [21:14:02] we know the current state is confusing. the old names are going away very soon [21:14:13] ah:) sounds good!, cool