Thread:Talk:WMF Projects/Wikimedia Labs/Root access to the production cluster?/reply

Well, just from having a labs account, it's possible to make root level changes in the production cluster. We have our puppet configuration in a public repository, and having an account allows contributors to push changes to the repository. When the changes are code reviewed, they can be deployed to production.

Otherwise, though, we already have volunteers with root access on our production cluster. Our beginnings were founded in volunteers being root, and I'd like to continue that tradition. Over time, by contributing to the labs environment, contributors should be able to gain privileges. I believe that it should be possible for well trusted contributors to be given higher privileges, including privileges in the production cluster.

There are a number of safeguards in the labs environment to safely give out higher levels of permissions over time.