Page MenuHomePhabricator
Create Task
Maniphest T259388

Requesting access to production shell for Denny Vrandecic
Closed, ResolvedPublic
Actions

Description

Username: DVrandecic
Full name: Denny Vrandečić
Add to groups: analytics-privatedata-users

  • Wikitech username: dvrandecic
  • Preferred shell username: dvrandecic
  • Email address: dvrandecic@wikimedia.org
  • Ssh public key (must be dedicated key for wmf production): ssh-rsa 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 dvrandecic@wikimedia.org
  • Requested group membership: analytics-privatedata-users
  • Reason for access: Denny is a full time WMF employee that should have access to data infrastructure, he already has access to turnilo/superset
  • Name of approving party (hiring manager, for WMF staff): Tnegrin (Toby Negrin)
    • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
    • - User has a valid NDA on file with WMF legal. (This can be checked by Operations via the NDA tracking sheet & is included in all WMF Staff/Contractor hiring.)
    • - User has provided the following: wikitech username, preferred shell username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform).
    • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
    • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for WMF staff)
    • - Patchset for access request

Details

SubjectRepoBranchLines +/-
admin: Set krb flag for dvrandecicoperations/puppetproduction+1 -0
admin: Add dvrandecic to analytics-privatedata-usersoperations/puppetproduction+10 -5
Customize query in gerrit

Event Timeline

DVrandecic created this task.Jul 31 2020, 8:10 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 31 2020, 8:10 PM
• Nuria edited projects, added SRE-Access-Requests, Analytics; removed Discovery-Search.Jul 31 2020, 8:33 PM
• Nuria updated the task description. (Show Details)
• Nuria updated the task description. (Show Details)
• Nuria updated the task description. (Show Details)Jul 31 2020, 9:39 PM
• Nuria added subscribers: dr0ptp4kt, • Nuria.Aug 1 2020, 6:04 PM

FYi that @DVrandecic 's manager needs to approve this request , is this @dr0ptp4kt ?

dr0ptp4kt added a subscriber: • Tnegrin.Aug 1 2020, 6:09 PM

@Tnegrin would you please approve?

• Tnegrin added a comment.Aug 1 2020, 6:25 PM

approved

herron updated the task description. (Show Details)Aug 3 2020, 5:01 PM
herron moved this task from Untriaged to Awaiting User Input on the SRE-Access-Requests board.Aug 3 2020, 5:09 PM
herron subscribed.

@Nuria could you please review and give a thumbs up/down on the request for analytics-privatedata-users membership?

@DVrandecic could you please review and sign the L3 document?

Once those two are complete we'll be ready to move on with the patchset. Thanks in advance!

• Nuria added a comment.Aug 3 2020, 10:40 PM

@herron: approved on my end.

@DVrandecic please be so kind to read the quite important data access guidelines (to summarize: data cannot leave WMF premises) https://wikitech.wikimedia.org/wiki/Analytics/Data_Access_Guidelines

gerritbot added a comment.Aug 4 2020, 9:16 AM

Change 618243 had a related patch set uploaded (by Alexandros Kosiaris; owner: Alexandros Kosiaris):
[operations/puppet@production] admin: Add dvrandecic to analytics-privatedata-users

https://gerrit.wikimedia.org/r/618243

gerritbot added a project: Patch-For-Review.Aug 4 2020, 9:16 AM
akosiaris updated the task description. (Show Details)Aug 4 2020, 9:17 AM
akosiaris subscribed.

@DVrandecic The patchset is ready to be merged, but we can't proceed without your signature on the L3 document. Could you please review and sign it? Thanks in advance!

akosiaris assigned this task to DVrandecic.Aug 6 2020, 11:08 AM
akosiaris triaged this task as Medium priority.Aug 6 2020, 11:11 AM
• Nuria added a comment.Aug 7 2020, 4:52 PM

I think L3 doc is signed now so we can proceeed?

mforns subscribed.Aug 10 2020, 3:31 PM

ping @akosiaris? :]

mforns edited projects, added Analytics-Radar; removed Analytics.Aug 10 2020, 3:32 PM
Vgutierrez subscribed.Aug 10 2020, 4:26 PM

@akosiaris is on vacations, I'll handle this ASAP

Vgutierrez claimed this task.Aug 10 2020, 4:27 PM
gerritbot added a comment.Aug 10 2020, 4:33 PM

Change 618243 merged by Vgutierrez:
[operations/puppet@production] admin: Add dvrandecic to analytics-privatedata-users

https://gerrit.wikimedia.org/r/618243

• Nuria added a comment.Aug 10 2020, 4:36 PM

@DVrandecic will also need a kerberos password

gerritbot added a comment.Aug 10 2020, 4:47 PM

Change 619325 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] admin: Set krb flag for dvrandecic

https://gerrit.wikimedia.org/r/619325

gerritbot added a comment.Aug 10 2020, 4:52 PM

Change 619325 merged by Vgutierrez:
[operations/puppet@production] admin: Set krb flag for dvrandecic

https://gerrit.wikimedia.org/r/619325

Vgutierrez closed this task as Resolved.Aug 10 2020, 4:55 PM
In T259388#6373672, @Nuria wrote:

@DVrandecic will also need a kerberos password

vgutierrez@krb1001:~$ sudo -i manage_principals.py create dvrandecic --email_address=dvrandecic@wikimedia.org
Principal successfully created. Make sure to update data.yaml in Puppet.
Successfully sent email to dvrandecic@wikimedia.org

done. https://gerrit.wikimedia.org/r/c/operations/puppet/+/618243 has been merged as well.

Maintenance_bot removed a project: Patch-For-Review.Aug 10 2020, 5:11 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL