I'd like to have Zppix access graphite so he can help us with some icinga monitoring setup in ORES

BTW, graphite access is already public:

https://graphite.wikimedia.org/render/?target=ores.scb1001.precache_cache_hit.count
https://graphite.wikimedia.org/render/?target=ores.scb1001.precache_cache_hit.count&format=json

@jcrespo when going to graphite.wikimedia.org i get a prompt to login i try every wmf login i have (non wikitech and wikitech and shell ) and no luck

The search function on graphite is private (requires NDA) but if there's a specific metric you want, all the data is publicly accessible if you construct the URL properly.

Is is very similar to the process listed here (which applies to for adding people to the WMF-NDA project in Phabricator): https://wikitech.wikimedia.org/wiki/Volunteer_NDA

To add someone to the cn=nda group, an NDA managed in Cobblestone is needed: Prior to that it needs approval by

• a WMF employee (Aaron did that on this task already)
• a comment of approval from one Wikimedia Foundation manager (usually the manager of an employee supporting you), so e.g. Dario
• sign off by a C-level staff of the Wikimedia Foundation

When that has been acked, you can mail Rachel Stallman from Legal, she then creates an NDA in Cobblestone, which can then be signed digitally by Zppix. When that's done, you can add Zppix to the cn=nda group in LDAP as outlined here: https://wikitech.wikimedia.org/wiki/Ops_Clinic_Duty#LDAP_group_changes

Thanks @MoritzMuehlenhoff!

 @Halfak and @Zppix can you guys follow https://wikitech.wikimedia.org/wiki/Volunteer_NDA remaining steps?
Thanks!

Wait, that wikitech page is for getting access to teh WMF-NDA group in Phabricator (I'll make a note to update it when I find some time), for getting Zppix LDAP access, please follow the steps outlined at https://phabricator.wikimedia.org/T168014#3353910 instead

I've updated the docs to differentiate between Phabricator NDA access and LDAP/shell access:
https://wikitech.wikimedia.org/wiki/Volunteer_NDA

Thank you!

In T168014#3368117, @RobH wrote:

It seems this is awaiting followup from @Zppix to work with @Halfak (as the employee who sponsored his access) to get the following steps:

• a comment of approval from one Wikimedia Foundation manager (usually the manager of an employee supporting you), so e.g. Dario
• sign off by a C-level staff of the Wikimedia Foundation
• @Zppix works with @RStallman-legalteam to sign and file an NDA with WMF Legal

I've gathered that from above comments from @MoritzMuehlenhoff.

WIP

I talked to @Zppix and @RStallman-legalteam. We're putting this on hold for now. Sorry for any extra work this caused. Please feel free to backlog it or untag projects. We'll re-tag it when we're ready to pick it up again.

@Halfak A workaround could be to prepare public graphite graphs/dashboard useful for ORES, and so Zppix or any other can use them.

Agreed. I was hoping to have @Zppix do all of the work to get this set up (because I have like 4 jobs and waiting for me to do something is bad), but it seems like I should instead find a way to do the preliminary work and let @Zppix take over.

I'm removing the SRE and SRE-Access-Requests tags, so this doesn't show in clinic duty triage, since its no longer an active request. I'd have declined it, but since its on two other projects, requested tag removal over closing task was requested. (Either works!)

In T168014#3379263, @RobH wrote:

I'm removing the SRE and SRE-Access-Requests tags, so this doesn't show in clinic duty triage, since its no longer an active request. I'd have declined it, but since its on two other projects, requested tag removal over closing task was requested. (Either works!)

were not closing the request just stalling it