username for Adrian Bielefeldt: arnad
Public ssh key for this phabricator task:

bastiononly does not exist.

@Krenair I'm going based on the recommendation at T142780#2562044 which seemed to suggest that it exists. does this need to be updated?

yes. it's been deleted: https://gerrit.wikimedia.org/r/#/c/301149/
It should no longer be necessary to add such a group, having a user defined in the admin module should enable bastion access.

username for wikitech account: Jgonsior
public ssh key:

Thanks for the pointer and information, @Krenair .

@Adrian_Bielefeldt @JGonsior can you confirm if both of you have read and signed https://phabricator.wikimedia.org/L3 ?

What project is this access linked to?

@Nuria this request is for Understanding Wikidata Queries: https://meta.wikimedia.org/wiki/Research:Understanding_Wikidata_Queries

Yes, I've read and signed the L3 document yesterday.

Sounds good, approved on my end. Please remember to open tickets to revoke access when project is done.

@Cmjohnson you helped us recently with T142780 . I added Ops-Access-Requests to this task but I'm not sure if I can/should do that. Please let me know if I should do things differently.

In T152023#2855353, @leila wrote:

@Cmjohnson you helped us recently with T142780 . I added Ops-Access-Requests to this task but I'm not sure if I can/should do that. Please let me know if I should do things differently.

Yes that is the correct tag, Then they are handled by the on-duty ops I believe.

Great. Thanks for confirming @Peachey88 .

@leila I have read and signed the L3 document as well.

Change 325868 had a related patch set uploaded (by RobH):
adding new shell users arnad & jgonsior

https://gerrit.wikimedia.org/r/325868

Please note that there are a couple things that'll make future requests easier:

• tag with SRE-Access-Requests, full details can be viewed on getting help from operations.
• the ops clinic duty assignee for the week handles and process all access requests, this changes weekly, so please avoid assigning or requesting access requests from a specific person.
• if you are ready for ops to take it over, please ensure it isnt assigned to anyone awaiting input, this way clinic duty takes it over.

For this, the only things that are needed at this point seem to be a confirmation that these are employees, or that the NDA for volunteers has been signed. @leila, can you confirm the NDA was signed for both @Adrian_Bielefeldt & @JGonsior? I can see it checked off in the task description, but since its fairly important I wanted someone to specifically state they've confirmed NDA status for both of these individuals. (I don't see either listed on the staff contact list.) Please confirm they have, and assign this task to @RobH (as long as the approval is in this week, before Friday December 9th, after that its another clinic duty person, so leave assigned to no one.)

I've created this patchset for the access request: https://gerrit.wikimedia.org/r/#/c/325868/

Once the NDA info has been added, and a full 3 business day wait has passed, its approved from Ops. Since this only got tagged with the ops-access-request today, the 3 day wait starts now. (Any days before adding the tag don't allow any kind of oversight.)

@RobH Thanks for double-checking re NDA. :) I confirm that the students and the WMF have signed NDA and MOU. The task that kept track of NDA/MOU creation/signature is T151913 .

Sounds good! Since the SRE-Access-Requests was added yesterday, I'll merge this on Friday if there are no objections.

Change 325868 merged by RobH:
adding new shell users arnad & jgonsior

https://gerrit.wikimedia.org/r/325868