Page MenuHomePhabricator

Request access to analytics cluster for bawolff
Closed, ResolvedPublic

Description

Hi all,

I would like access to the analytics cluster. On the basis of that in the event of a security incident, the analytics cluster would probably have useful information to figure out what happened.

I believe the groups I'm asking to be added to are:

  • analytics-privatedata-users
  • statistics-privatedata-users

I already have shell access. My manager is @EBjune and I believe she supports this request.

Ops Clinic Duty Checklist

This checklist should be used on all access requests to ensure that all steps are covered. This includes expansion to access.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document. (@Bawolff signed on Jul 3 2016, 17:42)
  • - User has a valid NDA on file with WMF legal. (This can be checked by Operations via the NDA tracking sheet. All staff have an NDA.)
  • - User has provided the following: wikitech username, preferred shell username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform. USER ALREADY HAS SHELL ACCOUNT
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.) USER ALREADY HAS SHELL ACCOUNT
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponser for volunteers, manager for wmf staff)
  • - non-sudo requests: 3 business day wait must pass with no objections being noted on the task - 3 day wait for objection ends on 2018-01-15.
  • - merge patchset https://gerrit.wikimedia.org/r/403430

Details

Related Changes in Gerrit:

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
RobH triaged this task as Medium priority.Jan 10 2018, 4:45 PM
RobH updated the task description. (Show Details)

Change 403430 had a related patch set uploaded (by RobH; owner: RobH):
[operations/puppet@production] Add bawolff to additional groups

https://gerrit.wikimedia.org/r/403430

@EBjune: Please comment with your approval of this expansion of access rights (as @Bawolff's manager.)

Thanks!

@RobH I approve of @Bawolff's expansion of access rights for the analytics cluster, thank you!

I believe just analytics-privatedata-users would be appropriate for this access.

Change 403430 merged by RobH:
[operations/puppet@production] Add bawolff to additional groups

https://gerrit.wikimedia.org/r/403430

RobH claimed this task.

Per @Ottomata's update, I revised the patchset to only include analytics-privatedata-users and it has been merged live.

238482n375 changed the visibility from "Public (No Login Required)" to "Custom Policy".
This comment was removed by Legoktm.