Page MenuHomePhabricator
Create Task
Maniphest T140399

Requesting shell access and access to groups 'analytics-privatedata-users' and 'researchers' for Mpany
Closed, ResolvedPublic
Actions

Description

Hi, I need shell access as well as access to 'analytics-privatedata-users' and 'researchers' to work with fundraising's banner history data.

Original ticket describing need for access: https://phabricator.wikimedia.org/T139764

Username: Mpany
Public key:
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbRaAUzTfgxalgYGZ7ztelMGXC7vDJ4VwFtFlMt9IvApeYViRh+eIwcr2+94cwextv5fuFD/UWAhk38KKsEnr2SDu1BhTeqlXM1Tfibb8vfq5SrUXzANh61HgqAt9XIyWPXhOFGBJWGZKIHE9DJaDZn5xCmkwz+KPe0smxa0QLHgJTs/Z0sHYu5wcJYPQ/D+b1lBQAPHMUzCIDz8t6ctFysb/pPubX7kbnILao+Q60D7L85+6jgPx2mGFHfsv4LiZP80BhsbrLjwOpuILy3A8jS9aJ9WI0q6Yap9vuRXa8D0DNiymeoGo5X6ye0vdtfe4NZuV9eru3BWBjbSFmRwXP MJP@MJPwork.local

@MeganHernandez_WMF Could you approve access?

Details

Related Changes in Gerrit:
SubjectAuthorRepoBranchLines +/-
admin: add mpany to analytics-privatedata-users,researchersDzahnoperations/puppetproduction+3 -3
admin: create shell account for mpanyDzahnoperations/puppetproduction+8 -1
Customize query in gerrit

Related Objects
Search...

Event Timeline

Mpany created this task.Jul 14 2016, 6:50 PM
Restricted Application added a project: SRE. · View Herald TranscriptJul 14 2016, 6:50 PM
Restricted Application added subscribers: Zppix, • Aklapper. · View Herald Transcript
fgiunchedi triaged this task as Medium priority.Jul 15 2016, 9:06 AM
fgiunchedi added a parent task: T139764: analytics server access request for three users from CPS Data Consulting .
Restricted Application removed a subscriber: Zppix. · View Herald TranscriptJul 15 2016, 9:06 AM
Jgreen added a comment.Jul 18 2016, 5:37 PM

@Mpany there's a poorly explained step in the sign up process, which is that you also need a wikitech/labs user--this process generates your UID. Can you go there "Join Wikitech" toward the bottom, and add the user info to this ticket?

https://wikitech.wikimedia.org/wiki/Special:UserLogin

Mpany added a comment.Jul 18 2016, 8:23 PM

@Jgreen: thanks for explaining!

wikitech username: Mpany
shell account name: mpany

Do you need anything else?

gerritbot subscribed.Jul 19 2016, 1:49 AM

Change 299702 had a related patch set uploaded (by Dzahn):
admin: create shell account for mpany

https://gerrit.wikimedia.org/r/299702

gerritbot added a project: Patch-For-Review.Jul 19 2016, 1:49 AM
Dzahn mentioned this in rOPUPb5cf6e6b6c1a: admin: create shell account for mpany.Jul 19 2016, 1:55 AM
Dzahn mentioned this in rOPUP4bac87e8aca5: admin: create shell account for mpany.Jul 19 2016, 6:06 PM
gerritbot added a comment.Jul 19 2016, 6:13 PM

Change 299702 merged by Dzahn:
admin: create shell account for mpany

https://gerrit.wikimedia.org/r/299702

elukey subscribed.Jul 20 2016, 12:27 PM
In T140399#2472630, @Mpany wrote:

Do you need anything else?

Yes we'd need manager's approval in this task to proceed, thanks!

• MeganHernandez_WMF added a comment.Jul 20 2016, 6:49 PM

Approved, thank you!

gerritbot added a comment.Jul 20 2016, 7:24 PM

Change 300088 had a related patch set uploaded (by Dzahn):
admin: add mpany to analytics-privatedata-users,researchers

https://gerrit.wikimedia.org/r/300088

Dzahn mentioned this in rOPUP0bbbfcd0eea7: admin: add mpany to analytics-privatedata-users,researchers.Jul 20 2016, 7:28 PM
Dzahn mentioned this in rOPUPfd65d9bb53e4: admin: add mpany to analytics-privatedata-users,researchers.Jul 20 2016, 7:33 PM
Dzahn mentioned this in rOPUP42e63be49a8b: admin: add mpany to analytics-privatedata-users,researchers.
Dzahn mentioned this in rOPUP90f79b183cc4: admin: add mpany to analytics-privatedata-users,researchers.Jul 20 2016, 7:37 PM
Dzahn mentioned this in rOPUPc8d9b028162f: admin: add mpany to analytics-privatedata-users,researchers.Jul 20 2016, 9:20 PM
gerritbot added a comment.Jul 20 2016, 9:20 PM

Change 300088 merged by Dzahn:
admin: add mpany to analytics-privatedata-users,researchers

https://gerrit.wikimedia.org/r/300088

Dzahn removed a project: Patch-For-Review.Jul 20 2016, 9:22 PM
Dzahn mentioned this in rOPUPf29545f377cc: admin: add mpany to analytics-privatedata-users,researchers.Jul 20 2016, 9:25 PM
Dzahn subscribed.EditedJul 20 2016, 9:25 PM

on bast1001:

Notice: /Stage[main]/Admin/Admin::Hashuser[mpany]/Admin::User[mpany]/User[mpany]/ensure: created

user mpany has been created on bast1001 and will be created on other hosts using the requested admin groups once puppet ran on them.. in about half an hour

@Jgreen

Dzahn added a comment.Jul 20 2016, 9:30 PM

@MeganHernandez_WMF thanks for approving. user has been created now

@Mpany You should be able to SSH to our "bastion hosts" now. there are 4 of them. bast1001, bast2001, bast3001 and bast4001.wikimedia.org

https://wikitech.wikimedia.org/wiki/Bastion

You will have to configure your ssh client to connect via the bastion hosts to any servers in our internal network. Here are some hints for how to do that:

https://wikitech.wikimedia.org/wiki/Production_shell_access

@Jgreen Are you helping the users how to get the actual data they need for FR purposes?

Jgreen added a comment.Jul 21 2016, 1:57 PM

You will have to configure your ssh client to connect via the bastion hosts to any servers in our internal network. Here are some hints for how to do that:

https://wikitech.wikimedia.org/wiki/Production_shell_access

@Mpany when you create your ~/.ssh/config put the fundraising section above the production section. The way the production section is written on the wikitech page doesn't play well with others, and you'll end up hitting the wrong bastion when accessing fundraising hosts otherwise.

@Jgreen Are you helping the users how to get the actual data they need for FR purposes?

They're probably going to end up working with Ellery and analytics folks to get up to speed on the analytics cluster.

Dzahn claimed this task.Jul 26 2016, 1:53 AM
Dzahn added a subscriber: Jgreen.
Dzahn closed this task as Resolved.Jul 26 2016, 1:56 AM

user has been created on bastion hosts, stat1002 and other places where the group is used

[bast1001:~] $ id mpany
uid=15095(mpany) gid=500(wikidev) groups=500(wikidev),707(bastiononly)

[stat1002:~] $ id mpany
uid=15095(mpany) gid=500(wikidev) groups=500(wikidev),731(analytics-privatedata-users)

Dzahn mentioned this in T139764: analytics server access request for three users from CPS Data Consulting .Jul 26 2016, 2:05 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits