Page MenuHomePhabricator
Create Task
Maniphest T141339

Requesting access to stat1003.eqiad.wmnet for WMDE-jand
Closed, ResolvedPublic
Actions

Description

Username: WMDE-jand
Full name: Jan Dittrich

Data Need:
General: User research and metrics for Wikidata and Technical Wishlist

Specific:
Finding out about addition and deletion patters of items on user’s watchlists:

  • How long do items stay on there?
  • In which rate are they added (many at once or few from continuously?)
  • In which rate are they deleted (many at once or few from continuously?)
  • What how much varies this?

Public Key

ssh-rsa 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 jan.dittrich@wikimedia.de

Details

SubjectRepoBranchLines +/-
admin: add jdittrich to researchers, bastionsoperations/puppetproduction+4 -2
admin: add shell account for Jan Dittrichoperations/puppetproduction+8 -0
Customize query in gerrit

Related Objects

Event Timeline

Jan_Dittrich created this task.Jul 26 2016, 7:48 AM
Restricted Application added a project: SRE. · View Herald TranscriptJul 26 2016, 7:48 AM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
elukey subscribed.Jul 26 2016, 8:02 AM

Hi Jan,

adding https://wikitech.wikimedia.org/wiki/Analytics/Data_access to this task as reference but you have probably already seen it. As far as I can understand you'd need access to the 'researchers' and 'statistics-users' groups, as well as a new shell access.

This is the current procedure: https://wikitech.wikimedia.org/wiki/Production_shell_access#Requesting_access

Have you a Wikitech account?

Addshore added a comment.Jul 26 2016, 9:39 AM
In T141339#2494880, @elukey wrote:

Hi Jan,

adding https://wikitech.wikimedia.org/wiki/Analytics/Data_access to this task as reference but you have probably already seen it. As far as I can understand you'd need access to the 'researchers' and 'statistics-users' groups, as well as a new shell access.

Yes I believe this request is for a new shell account and access to both 'researchers' and 'statistics-users' which will give @Jan_Dittrich access to stat1003 and the sql login details.

I endorse Jan in this request.

Wikitech user is https://wikitech.wikimedia.org/wiki/User:WMDE-jand

Addshore added a subscriber: • Deskana.Jul 26 2016, 9:39 AM
elukey added a subscriber: • Nuria.Jul 26 2016, 11:01 AM

@Nuria any objection to this access request?

• AlexMonk-WMF subscribed.Jul 26 2016, 1:50 PM

'statistics-users' seems redundant if you've got 'researchers'

elukey added a comment.Jul 26 2016, 2:07 PM
In T141339#2495557, @AlexMonk-WMF wrote:

'statistics-users' seems redundant if you've got 'researchers'

I am not super familiar with the exact difference between them for stat1003 so since we usually add them both I mentioned all of them. Happy to restrict the allowed groups if they are redundant!

• AlexMonk-WMF added a comment.Jul 26 2016, 3:58 PM
In T141339#2495617, @elukey wrote:
In T141339#2495557, @AlexMonk-WMF wrote:

'statistics-users' seems redundant if you've got 'researchers'

I am not super familiar with the exact difference between them for stat1003 so since we usually add them both I mentioned all of them. Happy to restrict the allowed groups if they are redundant!

It probably doesn't matter much in this case, but I think in general you should be sure of exactly what privileges a group provides before adding anyone to it. What is the benefit of giving statistics-users to someone who already has full researchers access?

elukey added a comment.Jul 26 2016, 4:00 PM

I will follow up adding some clarity to https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Access_Groups

Addshore added a comment.Jul 26 2016, 4:02 PM
In T141339#2495976, @elukey wrote:

I will follow up adding some clarity to https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Access_Groups

I think the thing to clear up would be, does "researchers" actually provide a user access to stat1003?

• AlexMonk-WMF added a comment.Jul 26 2016, 4:05 PM
In T141339#2495987, @Addshore wrote:
In T141339#2495976, @elukey wrote:

I will follow up adding some clarity to https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Access_Groups

I think the thing to clear up would be, does "researchers" actually provide a user access to stat1003?

Yes. You can find this out in puppet (manifests/site.pp shows it has role statistics::cruncher, hieradata/role/common/statistics/cruncher.yaml lists the group under admin::groups), but also: I am a member of researchers but not statistics-users, and I can log into stat1003.

Addshore added a comment.Jul 26 2016, 4:07 PM
In T141339#2495993, @AlexMonk-WMF wrote:

Yes. You can find this out in puppet (manifests/site.pp shows it has role statistics::cruncher, hieradata/role/common/statistics/cruncher.yaml lists the group under admin::groups), but also: I am a member of researchers but not statistics-users, and I can log into stat1003.

In that case this will probably help, https://wikitech.wikimedia.org/w/index.php?title=Analytics/Data_access&diff=791380&oldid=791346

elukey added a comment.Jul 26 2016, 4:15 PM

Confirmed with ottomata that 'researchers' is the only one needed.

Dzahn triaged this task as Medium priority.Jul 27 2016, 2:31 AM
Dzahn subscribed.EditedJul 28 2016, 11:02 PM

Looks like this ticket is lacking a (manager) approval. Please get one.

gerritbot subscribed.Jul 28 2016, 11:06 PM

Change 301721 had a related patch set uploaded (by Dzahn):
admin: add shell account for Jan Dittrich

https://gerrit.wikimedia.org/r/301721

gerritbot added a comment.Jul 28 2016, 11:11 PM

Change 301721 abandoned by Dzahn:
admin: add shell account for Jan Dittrich

https://gerrit.wikimedia.org/r/301721

Dzahn mentioned this in rOPUP3091ab10a1ee: admin: add shell account for Jan Dittrich.Jul 28 2016, 11:13 PM
Jan_Dittrich added a subscriber: • Abraham.Jul 29 2016, 7:19 AM

@Abraham: Can you approve this request?

gerritbot added a comment.Jul 29 2016, 10:16 PM

Change 301721 restored by Dzahn:
admin: add shell account for Jan Dittrich

https://gerrit.wikimedia.org/r/301721

• Abraham added a comment.Aug 1 2016, 8:26 AM

Hi all, I approve this request /cc @Dzahn.
Thank you.

Dzahn mentioned this in rOPUP8f7474f39b64: admin: add shell account for Jan Dittrich.Aug 1 2016, 8:01 PM
Dzahn mentioned this in rOPUP296f2bab32c5: admin: add shell account for Jan Dittrich.Aug 1 2016, 8:21 PM
gerritbot added a comment.Aug 1 2016, 8:33 PM

Change 301721 merged by Dzahn:
admin: add shell account for Jan Dittrich

https://gerrit.wikimedia.org/r/301721

Dzahn mentioned this in rOPUP257c2db03bc5: admin: add shell account for Jan Dittrich.Aug 1 2016, 8:36 PM
gerritbot added a comment.Aug 1 2016, 10:02 PM

Change 302355 had a related patch set uploaded (by Dzahn):
admin: add jdittrich to researchers, bastions

https://gerrit.wikimedia.org/r/302355

Dzahn mentioned this in rOPUP579ed5d5aa8e: admin: add jdittrich to researchers, bastions.Aug 1 2016, 10:05 PM
gerritbot added a comment.Aug 1 2016, 10:07 PM

Change 302355 merged by Dzahn:
admin: add jdittrich to researchers, bastions

https://gerrit.wikimedia.org/r/302355

Dzahn mentioned this in rOPUP0944df8005e8: admin: add jdittrich to researchers, bastions.Aug 1 2016, 10:10 PM
Dzahn added a comment.Aug 1 2016, 10:12 PM

[bast1001:~] $ id jdittrich
uid=14685(jdittrich) gid=500(wikidev) groups=500(wikidev),707(bastiononly)

[stat1003:~] $ id jdittrich
uid=14685(jdittrich) gid=500(wikidev) groups=500(wikidev),714(researchers)

Dzahn closed this task as Resolved.Aug 1 2016, 10:14 PM
Dzahn claimed this task.

@Jan_Dittrich Your request has been granted. You should now be able to ssh to the "bastion hosts" (like bast1001.wikimedia.org and the same for bast2001,bast3001 and bast4001 within the next half hour).

And then you can proxy via the bastion hosts over to stat1003.

See this for example configs how to do that

https://wikitech.wikimedia.org/wiki/Production_shell_access

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL