Page MenuHomePhabricator

Requesting access to bast1001, stat1005, stat1006 for risler
Closed, ResolvedPublicRequest

Description

Username: RIsler
Full name: Ramsey Isler
Public SSH: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN7/rMDCncb17UZvNwiSTRnrs2ouQbvobZJy0UfOeXCb ed25519-key-20180119

I'm a WMF employee (Product Manager) and have the necessary NDA filed.

I'm requesting access to:
bast1001
stat1005
stat1006

I've added Jon Katz as a subscriber for approval.

Ops Clinic Duty Checklist

This checklist should be used on all access requests to ensure that all steps are covered. This includes expansion to access. Please do not check off items on the list below unless you are in OPs and have confirmed the step.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (This can be checked by Operations via the NDA tracking sheet and is included in all WMF staff/contractor hires.)
  • - User has provided the following: wikitech username, preferred shell username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform.
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponser for volunteers, manager for wmf staff) In T185356#3920656 @JKatzWMF approved access.
  • - non-sudo requests: 3 business day wait must pass with no objections being noted on the task. Groups were determined on 2017-01-23, so 3 day wait would end on 2018-01-26.
  • - Patchset for access request https://gerrit.wikimedia.org/r/#/c/405981/ & https://gerrit.wikimedia.org/r/#/c/405982/

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
RobH triaged this task as Medium priority.EditedJan 20 2018, 12:58 AM
RobH updated the task description. (Show Details)
RobH subscribed.

@Ramsey-WMF: There are multiple access groups that can login to those machines, please review https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Access_Groups and let us know which groups you specifically need.

ALL shell access includes access to bastions, so the request for bast1001 is covered.

Additionally, we'll need you to review and digitally sign the L3 document. In checking, I don't see a username of RIsler on wikitech, what is your wikitech.wikimedia.org username? (If you don't have one yet, you'll need to create one before we can grant shell access.)

I'll be on ops clinic duty all next week, so you can feel free to ask questions on this task and I'll likely be the one to respond. Let me know if you have any questions!

I've assigned this back to @Ramsey-WMF for feedback.

Ops Clinic Notes: This is WMF All Hands week, so there is a very real chance that this task won't see any reply back from @Ramsey-WMF until AFTER all hands is over.

Hi @RobH , to your questions:

  • As far as access groups, I think statistics-privatedata-users works.
  • the L3 doc says I've signed it. - "You signed this document on Aug 24 2017, 2:53 PM."
  • As for my username, I've had the account for a while and it's listed as Risler on Wikitech and the instance shell name is risler (perhaps case sensitivity was the problem?)

Change 405981 had a related patch set uploaded (by RobH; owner: RobH):
[operations/puppet@production] adding new shell user Ramsey Isler

https://gerrit.wikimedia.org/r/405981

Yeah I'm not sure how I missed it, but I totally see it now. (Your wikitech user & L3 signature.)

I'll create the patchsets and get it all merged.

Change 405982 had a related patch set uploaded (by RobH; owner: RobH):
[operations/puppet@production] adding Ramsey Isler to statistics-privatedata-users

https://gerrit.wikimedia.org/r/405982

RobH updated the task description. (Show Details)
RobH moved this task from user confirm to 3 Business Day Wait on the SRE-Access-Requests board.

Change 405981 merged by RobH:
[operations/puppet@production] adding new shell user Ramsey Isler

https://gerrit.wikimedia.org/r/405981

Change 405982 merged by RobH:
[operations/puppet@production] adding Ramsey Isler to statistics-privatedata-users

https://gerrit.wikimedia.org/r/405982

RobH removed RobH as the assignee of this task.
RobH claimed this task.
RobH updated the task description. (Show Details)
RobH removed a project: Patch-For-Review.

@Ramsey-WMF: Your access is now live. It may take up to 30 minutes for affected hosts to receive the update.

If you have any issues or questions with this access, feel free to reopen this task and ask here.