Page MenuHomePhabricator

add mforns, milimetric, nuria,ottomata, madhuvishy and joal to piwik-roots
Closed, ResolvedPublic

Description

the analytics team is asking for these users:

mforns, milimetric, nuria,ottomata, madhuvishy and joal

to become piwik-roots (users with sudo ALL ALL privileges)

on the piwiki machine which is setup in the parent ticket

10:36 < nuria> mutante: ok, then piwik-admins with mforns, milimetric, nuria,ottomata, madhuvishy and joal
10:39 < nuria> mutante: full sudo please

jminor said: Can we also add @BGerstle-WMF to that group?

Event Timeline

Dzahn assigned this task to JMinor.
Dzahn raised the priority of this task from to Medium.
Dzahn updated the task description. (Show Details)
Dzahn added a project: SRE-Access-Requests.

Please let me or @BGerstle-WMF know what you need (if anything) for adding access.

Nuria set Security to None.
Nuria moved this task from Incoming to Radar on the Analytics-Backlog board.

I'm on ops clinic duty this week, but since this is a sudo request, it will require the approval of an operations team meeting. I won't be around for next Monday's meeting on 2015-12-28.

Would someone else in ops volunteer to list this on the meeting notes and provide feedback to this task from the meeting?

Additionally, all of these users should have previously been setup with shell access. If any have not, they need to have their task setup on its own task.

This lack some more information. What kind of access is required ? starting/stopping mysql ? apache? seeing logs ? not seeing logs ? what is it that people in the new group will do ?

We will need to be able to see logs, do queries and start an stop the web application at least.

We will need to be able to see logs, do queries and start an stop the web application at least.

Great!. That sounds like

  • file permissions (I assume you refer to piwik logs and apache logs),
  • a mysql account
  • sudo service apache2 {start,stop,restart},

up to now just a single sudo rule. Feel free to add stuff, but we can get started with this

Excellent, that should be it for the time coming.

This has been commented on the weekly meeting, and while there was positivity about providing higher privileges for the control of the VM or machine services, it was requested to follow up with operations to clarify all requirements and some design recommendations to secure adequate network and traffic security. I can be the contact point for this week.

Meeting result: We approved the analytics group folks in this request to add mforns, milimetric, nuria,ottomata, madhuvishy and joal to piwik-roots

This can now be picked up by clinic duty and processed.

Change 264229 had a related patch set uploaded (by Cmjohnson):
Adding piwik-roots group bug: task# T122325

https://gerrit.wikimedia.org/r/264229

Change 264229 merged by Cmjohnson:
Adding piwik-roots group bug: task# T122325

https://gerrit.wikimedia.org/r/264229

Change 264287 had a related patch set uploaded (by Cmjohnson):
Adding admin role to piwik.yaml bug: task# T122325

https://gerrit.wikimedia.org/r/264287

Change 264287 had a related patch set uploaded (by Filippo Giunchedi):
Adding admin role to piwik.yaml

https://gerrit.wikimedia.org/r/264287

Change 264287 merged by Filippo Giunchedi:
Adding admin role to piwik.yaml

https://gerrit.wikimedia.org/r/264287

Cmjohnson claimed this task.
Cmjohnson subscribed.

The admin role has been added to and group added to piwki.yaml